ThreatVectr
Tag

#webshell

3 stories taggedwebshell.

An e-commerce website backend showing a file upload dialog box, with PHP webshell code visible in the editor beneath, and an alert badge showing blocked attack
Vulnerabilities

WordPress plugin flaw is being used to plant hidden backdoors on shop sites

A file-upload bug in WooCommerce Wholesale Lead Capture lets attackers drop PHP webshells with no login required. Wordfence has blocked more than 100,000 attempts.

4 min read
A hacker's workspace with multiple monitors showing file upload interfaces and server command lines, a PHP code snippet visible on one screen, malicious activit
Vulnerabilities

Attackers Race to Exploit Elementor Pro Flaw, 190,000 Attempts Logged in Four Days

A file-upload bug in the popular WordPress plugin lets criminals plant a PHP backdoor and run commands on the server. Patch shipped August 19; attacks began the same day.

4 min read
Illustration: A dimly lit server room with rows of dark racks, subtle blue and amber indicator lights
Vulnerabilities

Australia sounds the alarm: hackers are hijacking small business websites at scale

The Australian Cyber Security Centre says a worldwide campaign is planting hidden backdoors on sites running WordPress, Joomla, Craft CMS and more, with small businesses bearing the brunt.

3 min read
© 2026 Threat Vectr