
A critical security flaw in the popular WooCommerce Payments WordPress plugin has become a lucrative opportunity for threat actors. The vulnerability, tracked as CVE-2023-28121, enables unauthenticated attackers to impersonate arbitrary users, including administrators, potentially leading to site takeover. In recent days, a massive targeted campaign exploiting this flaw has been observed, posing a significant threat to thousands of websites. Overview










