{"uuid": "af627268-6ea7-4f0a-8628-1dd7da960446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3162", "content": "\ud83d\udd34 Hackers Actively Exploit Critical WooCommerce Plugin Vulnerability to Upload PHP Backdoors\n\nThreat actors are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture plugin that lets unauthenticated attackers upload malicious PHP files and potentially seize full control of vulnerable WordPress sites.\n\nThe vulnerability , tracked as CVE-2026-27540, affects plugin versions 2.0.3.1 and earlier and has received a CVSS severity score of 9.8 out of 10.", "creation_timestamp": "2026-09-18T00:00:06.566293Z"}