Attackers Exploit Woo Commerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
Threat actors are exploiting CVE-2026-27540, a critical arbitrary file upload flaw (CVSS 9.8) in the WooCommerce Wholesale Lead Capture plugin, which has more than 6,000 active installs and is affected in all versions up to and including 2.0.3.1. Wordfence...