Info Security Magazine
3 years, 1 month ago
PII Exposed: Unauthenticated IDOR in WooCommerce Stripe Plugin
The vulnerability affects versions 7.4.0 and below of the WordPress plugin
Security news aggregator
Latest cybersecurity reporting from selected sources.
Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
5
headlines in this view
Refine the feed
Search across headline titles and summaries.
Volume over time
Weekly headline count for the current query.
Showing 5 most recent headlines
Filtered view
The Hacker News
3 years, 1 month ago
Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack
Cybersecurity researchers have unearthed a new ongoing Magecart-style web skimmer campaign that's designed to steal personally identifiable information (PII) and credit card data from e-commerce websites
Bleeping Computer
4 years ago
PayPal phishing kit added to hacked WordPress sites for full ID theft
A newly discovered phishing kit targeting PayPal users is trying to steal a large set of personal information from victims that includes government identification documents and photos. [...]
Bleeping Computer
4 years, 5 months ago
WordPress force installs UpdraftPlus patch on 3 million sites
WordPress has taken the rare step of force-updating the UpdraftPlus plugin on all sites to fix a high-severity vulnerability allowing website subscribers to download the latest database backups, which often contain credentials and PII. [...]
Threat Post
4 years, 5 months ago
Severe WordPress Plug-In UpdraftPlus Bug Threatens Backups
An oversight in a WordPress plug-in exposes PII and authentication data to malicious insiders.