Hackers Exploit WooCommerce Wholesale Lead Capture Plugin to Deploy PHP Backdoors

According to recent reports, hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress. The exploitation chain involves uploading a PHP backdoor to affected websites. The vulnerability impacts sites using this premium plugin, which is designed for wholesale lead capture functionality. While the exact technical details of the vulnerability remain limited in the initial reporting, the ability to upload arbitrary PHP code represents a significant security risk. The affected plugin is developed by Automattic and integrated with the WooCommerce ecosystem. As of the reporting date, no official patch has been released, and users are advised to update the plugin to a patched version if available or disable the plugin until a fix is applied. The identity of the threat actors and the specific CVE identifier associated with the flaw have not been confirmed in the initial reports.