Vulnscanner Blog

Carding Tool Abusing WooCommerce API: What You Need to Know and How to Protect Your Website

In the ever-evolving landscape of cybersecurity, new threats constantly emerge, challenging the security of online platforms. Recently, a concerning report from BleepingComputer highlighted a carding tool that abuses the WooCommerce API, posing a significant risk to online stores. This article aims to break down this threat in simple terms, explaining its implications and providing actionable […]

MU-Plugins Abused By WordPress Hackers to Hide Malicious Code

Introduction Recent reports have uncovered a new tactic employed by hackers targeting WordPress websites. By exploiting the ‘Must-Use’ (mu-plugins) feature, attackers can discreetly inject malicious code, compromising site integrity and user trust. Understanding this threat and implementing robust security measures is crucial for all WordPress site owners. Table of Contents Understanding MU-Plugins Must-Use Plugins, commonly […]

Dollyway Malware Breach: How to Safeguard Your WordPress Site

In recent weeks, a significant cyber threat known as the Dollyway malware campaign has been causing widespread disruption across the internet. The campaign has affected over 20,000 WordPress websites, breaching their security and exposing sensitive data. Table of Contents Overview of the Dollyway Malware Campaign The Dollyway malware campaign has been one of the largest […]