Breeze Cache WordPress Plugin
A WordPress caching plugin targeted in a global CMS exploitation campaign for web shell deployment.
Tag: WordPress
WavePlayer WordPress Plugin
A WordPress plugin for audio playback, targeted in a global CMS exploitation campaign for web shell deployment.
iCagenda and Balbooa Forms Joomla Flaws Exploited as Zero-Days; CISA Adds to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…
CVE-2026-0740: Ninja Forms WordPress Plugin Vulnerability
A vulnerability in the Ninja Forms WordPress plugin exploited in a global CMS campaign for web shell deployment.
CVE-2025-12057: WavePlayer WordPress Plugin Vulnerability
A vulnerability in the WavePlayer WordPress plugin exploited in a global CMS campaign for web shell deployment.
CVE-2025-7852: WPBookit WordPress Plugin Vulnerability
A vulnerability in the WPBookit WordPress plugin exploited in a global CMS campaign for web shell deployment.
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
A cybercrime crew left its server exposed for three weeks, revealing the inner workings of a mass site-hacking operation tracked as WP-SHELLSTORM.…
CVE-2026-3844: Breeze Cache WordPress Plugin Vulnerability
A vulnerability in the Breeze Cache WordPress plugin exploited in a global CMS campaign for web shell deployment.
WP-SHELLSTORM: Webshell Access Brokerage Operation
A cybercrime operation that breaks into websites at scale, plants webshell backdoors, and packages access for resale. Targeted WordPress and Joomla sites…
Breeze Caching Plugin for WordPress
A WordPress caching plugin vulnerable to CVE-2026-3844, exploited by WP-SHELLSTORM to backdoor over 17,000 sites. Fixed in version 2.4.5.