PHP backdoor

Hackers Exploit WooCommerce Wholesale Lead Capture Plugin to Deploy PHP Backdoors

Security researchers report that unidentified hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress. The flaw allows attackers to upload a PHP backdoor, potentially leading to full site compromise, data theft, and further malicious activities. No patch information has been provided at this time.