Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Threat actors are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture WordPress plugin, which has over 6,000 active installs. The flaw allows unauthenticated attackers to upload arbitrary files, including PHP backdoors, leading to remote code execution on affected sites. Wordfence, a WordPress security company, identified and disclosed the vulnerability and has reported blocking numerous exploitation attempts. The plugin's widespread use makes this a significant threat to WordPress-based e-commerce sites. Attackers are leveraging the flaw to plant PHP web shells, enabling persistent access and further compromise of affected servers. Site owners using this plugin are urged to apply patches or mitigations immediately.