A vulnerability in a WordPress plugin

Home — Blog — A vulnerability in a WordPress plugin

Back

29.06.2020

Magecart JavaScript code was put into the EXIF metadata of images by hackers – the code was then executed by the stores which got impacted. Malwarebytes research claims that fraud based on hiding credit card skimmers in image format files is a rare one.

The researchers were going to take the exploit analysed by them for a version of a favicon scam, but this one appeared to be radically different. WooCommerce plugin used by WordPress gave way to the malicious code.

JavaScript makes it possible to compromise practically any platform and gadget due to its popularity and omnipresence. This time the loaded code devoured names, addresses and credit card details.

BACK TO BLOG LIST

Subscribe to get helpful articles and white papers. We discuss industry trends and give advice on how to deal with data leaks and cyber incidents.

Necessary Cookies

Always active. These cookies are essential to our website working effectively.
Cookies does not collect personal information. You can disable the cookie files record on the Internet Settings tab in your browser.

Functional Cookies

These cookies allow SearchInform to provide enhanced functionality and personalization, such as remembering the language you choose to interact with the website.

Performance Cookies

These cookies enable SearchInform to understand what information is the most valuable to you, so we can improve our services and website.

Third-party Cookies

These cookies are created by other resources to allow our website to embed content from other websites, for example, images, ads, and text.