Several plugins for WordPress hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A malicious threat actor compromised the source code of various plugins and injected code that exfiltrates database credentials and is used to create new, malicious, administrator users and send that data back to a server. Currently, not all plugins have been patched and we strongly recommend uninstalling the plugins for the time being and running a complete malware scan.

The WordPress Social Warfare Plugin installed on the remote host is affected by an injected backdoor.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The WordPress Pods Plugin installed on the remote host is affected by an injected backdoor.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The WordPress PowerPress Podcasting Plugin installed on the remote host is affected by an injected backdoor.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
114443	Social Warfare Plugin for WordPress 4.4.6.4 < 4.4.7.3 Injected Backdoor	Web App Scanning	Component Vulnerability	critical
114442	Pods Plugin for WordPress 3.2.3 Injected Backdoor	Web App Scanning	Component Vulnerability	critical
114441	PowerPress Podcasting Plugin for WordPress 11.9.3 / 11.9.4 Injected Backdoor	Web App Scanning	Component Vulnerability	critical

Detections

Analytics

CVE-2024-6297

critical

Tenable Plugins

critical

critical

critical