Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access

🗓️ 06 Mar 2025 09:57:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 47 Views

Over 1,000 WordPress sites infected with JavaScript backdoors allowing persistent attacker access.

Reporter	Title	Published	Views	Family All 77
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	13 Aug 202407:33	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	30 Jun 202416:49	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	19 Aug 202419:25	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	27 Jun 202421:57	–	githubexploit
GithubExploit	Exploit for Code Injection in Geoserver	5 Jul 202415:24	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	28 Jun 202412:45	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	28 Jun 202414:50	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	1 Jul 202408:19	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce	13 Aug 202407:33	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Aviatrix Controller	12 Jan 202511:20	–	githubexploit

27 Mar 2025 05:52Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.99994

SSVC

wordpress security breach javascript backdoors persistent access threat unauthorized ssh keys compromised websites.