Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
WooCommerce Plugin Bug Lets Remote Attackers Create Admin Accounts and Take Over Sites
Excerpt
A critical security flaw in the WooCommerce Wholesale Lead Capture plugin is being actively exploited, allowing remote attackers to upload malicious files and potentially take full control of vulnerable WordPress sites. The vulnerability, tracked as CVE-2026-27540, affects WooCommerce Wholesale Lead Capture versions 2.0.3.1 and earlier. The premium plugin, used by an estimated 6,000 websites, helps store owners build wholesale-registration forms and supports file uploads as…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-27540 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…