Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Hackers Exploit WooCommerce Plugin Bug to Take Over WordPress Sites Without Login
Attackers are actively exploiting a critical flaw in a WooCommerce extension to seize control of WordPress sites without a username or password. The issue affects Wholesale Lead Capture and turns a routine file-upload feature into a direct path to server access. The vulnerability, tracked as CVE-2026-27540, has a CVSS severity score of 9.8 and affects […] The post Hackers Exploit WooCommerce Plugin Bug to Take Over WordPress Sites Without Login appeared first on Cyber Security News.
Attackers are actively exploiting a critical flaw in a WooCommerce extension to seize control of WordPress sites without a username or password. The issue affects Wholesale Lead Capture and turns a routine file-upload feature into a direct path to server access. The vulnerability, tracked as CVE-2026-27540, has a CVSS severity score of 9.8 and affects versions through 2.0.3.1. An attacker can reach the exposed upload function and place executable code on an unpatched…
Excerpt shown under the publisher's RSS terms · 73 words · full text and figures are on the publisher's site
Related coverage
WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments
Cybersecurity News · Sep 25, 2026
Critical wp2shell RCE Vulnerability – Complete Coverage Including PoC and Active Exploitation Details
Cybersecurity News · Jul 20, 2026
Hackers Exploit ownCloud and WordPress Flaws to Steal Philippine Nuclear and Naval Data
Cybersecurity News · Aug 27, 2026
Hackers Exploit Critical miniOrange SAML SSO Flaws to Hijack WordPress Admin Accounts
Cybersecurity News · Aug 25, 2026