The Wordfence Threat Intelligence team has warned that WordPress (WP) Sites were actively targeted with exploits targeting a zero-day vulnerability in the WPGateway premium plugin.
Zero-day in WPGateway WordPress plugin actively exploited in attacks – bleepingcomputer.com
The Wordfence Threat Intelligence team warned today that WordPress sites are actively targeted with exploits targeting a zero-day vulnerability in the WPGateway premium plugin. WPGateway is a WordPress plugin that allows admins to simplify various tasks, including setting up and backing up sites and managing themes and plugins from a central dashboard.
Link: Zero-day in WPGateway WordPress plugin actively exploited in attacks
via www.bleepingcomputer.com