Page 1 of 1

Zero-Day Attacks on Critical WooCommerce Bug Threaten Databases

Posted: Thu Jul 15, 2021 10:04 pm
by Accrete
Those using WooCommerce need to look into this problem right away:
The popular e-commerce platform for WordPress has started deploying emergency patches.

A critical SQL-injection security vulnerability in the WooCommerce e-commerce platform and a related plugin has been under attack as a zero-day bug, researchers have disclosed.

The exploitation prompted WooCommerce to release an emergency patch for the issue late on Wednesday. The bug could allow unauthenticated cyberattackers to make off with scads of information from an online store’s database – anything from customer data and payment-card info to employee credentials....
Continued: Zero-Day Attacks on Critical WooCommerce Bug Threaten Databases