WordPress Plugin Vulnerabilities

wpdefault - Backdoor Plugin

Description

Sucuri Labs found that the malicious wpdefault plugin was skimming payment data from WooCommerce stores.

Affects Plugins

Plugin icon
wpdefault
No known fix

References

URL
https://labs.sucuri.net/skimmer-plugin-hides-itself-from-wp-admin/

Miscellaneous

Original Researcher
Moe O (Sucuri)
Verified
No
WPVDB ID
3366f908-2df2-4c47-ab85-fbfde7445d5e

Timeline

Publicly Published
2020-02-27 (about 6 years ago)
Added
2020-02-27 (about 6 years ago)
Last Updated
2020-02-29 (about 6 years ago)

Other

Published
Title
Published
2020-01-27
Title
blnmrpb - Webshell in Fake Plugin
Published
2020-04-22
Title
M-Shield & kingof - Fake Malware Backdoor Plugins
Published
2026-04-07
Title
Smart Slider 3 Pro 3.5.1.35 - Compromised Plugin
Published
2017-09-10
Title
Display Widgets 2.6.0-2.6.3.1 - Backdoored
Published
2017-12-28
Title
No Follow All External Links 2.1.0-2.3.0 (current) - Backdoored