Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites

🗓️ 12 Mar 2024 09:15:00Reported by The Hacker NewsType

Malware campaign exploits Popup Builder WordPress Plugin to infect over 3,900 sites, injecting malicious code and creating rogue admin users. Sites urged to update plugins and scan for suspicious code

Reporter	Title	Published	Views	Family All 82
GithubExploit	Exploit for SQL Injection in Ultimatemember Ultimate_Member	15 Sep 202411:28	–	githubexploit
GithubExploit	Exploit for SQL Injection in Ultimatemember Ultimate_Member	30 Aug 202404:23	–	githubexploit
GithubExploit	Exploit for SQL Injection in Ultimatemember Ultimate_Member	1 Nov 202414:57	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Sygnoos Popup_Builder	10 Mar 202416:20	–	githubexploit
GithubExploit	Exploit for SQL Injection in Ultimatemember Ultimate_Member	18 Mar 202416:58	–	githubexploit
GithubExploit	Exploit for SQL Injection in Ultimatemember Ultimate_Member	30 Aug 202404:23	–	githubexploit
GithubExploit	Exploit for SQL Injection in Ultimatemember Ultimate_Member	27 Feb 202411:41	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Sygnoos Popup_Builder	14 Oct 202414:11	–	githubexploit
BDU FSTEC	The vulnerability of the Ultimate Member plugin for the WordPress content management system allows a hacker to execute arbitrary SQL queries against the database.	29 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Popup Builder plugin of the WordPress content management system allows attackers to carry out cross-site scripting attacks.	20 Mar 202400:00	–	bdu_fstec

13 Mar 2024 04:36Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.1 - 9.8

EPSS0.89431

SSVC