Published: · Region: Global · Category: cyber

Active Exploits Hit WooCommerce Wholesale Lead Capture and WSO2 API Manager Vulnerabilities

Attackers are using a critical flaw in the WooCommerce Wholesale Lead Capture plugin to deploy PHP web shells and are also probing a token-handling bug in WSO2 API Manager that can enable account takeover, with fixes available in both cases.

Two separate vulnerabilities in widely used web tools are under active attack, exposing both online stores and enterprise APIs.

Security researchers report that a critical vulnerability tracked as CVE‑2026‑27540 affects the WooCommerce Wholesale Lead Capture plugin up to and including version 2.0.3.1. Attackers are exploiting the flaw to plant PHP web shells, giving them remote control over affected servers. One security firm says it has blocked more than 100,000 exploit attempts since June, indicating broad and automated scanning for this weakness.

A second issue, CVE‑2026‑5430, targets WSO2 API Manager. The flaw involves forged authentication tokens that can bypass checks and lead to account takeover. Active exploitation attempts have been observed against this bug as well.

In both cases, a successful attack can let intruders run commands, change configurations or access sensitive data behind the scenes of websites and APIs.

Vendors have released fixes for the WSO2 vulnerability, and updated versions of the WooCommerce Wholesale Lead Capture plugin are available. Key signals to watch are whether exploit volumes continue to rise, whether hosting providers enforce updates for vulnerable sites, and whether any major breaches are eventually tied back to these specific flaws.

Sources

Related Coverage

GLOBAL

U.S. Probes Cyberattacks on Oil Tankers Near Gibraltar, Raising New Fears for Maritime Energy Flows

U.S. investigators say at least two foreign oil and LNG tankers bound for American ports were hit by cyberattacks while sailing past the Strait of Gibraltar in August, compromising their IT and operational systems. The probes point to a new kind of chokepoint risk, where energy supplies can be targeted digitally long before tankers reach U.S. waters.
GLOBAL

U.S. Probes Suspected Cyberattacks on Oil and LNG Tankers Hit Near Gibraltar

U.S. officials are investigating suspected cyberattacks on at least two foreign oil and LNG tankers that were targeted while passing the Strait of Gibraltar in August before sailing to the Gulf of Mexico. The incidents compromised both operational and IT systems on vessels supplying the U.S., prompting Coast Guard and FBI inspections on arrival.
GLOBAL

U.S. Probes Cyberattacks on Oil and LNG Tankers Hit Near Strait of Gibraltar

U.S. authorities are investigating suspected cyberattacks on at least two foreign oil and LNG tankers that were compromised while passing through the Strait of Gibraltar in August, then inspected by Coast Guard and FBI teams in the Gulf of Mexico.
FORECAST

Sustained Gulf and Red Sea Tensions Likely to Lift Brent Above Key Technical Resistance

Global · 7d
WARNING

Russia Extends Diesel Export Ban as EU Sharpens China Trade, Raw Material Security Push

Moscow’s decision by 07:08 UTC to keep diesel exports locked through October tightens a key artery of global refined fuel supply just as EU President von der Leyen, speaking around 07:25–07:59 UTC, vowed to use “all tools” to rebalance economic ties with China and unveiled a new European critical raw materials corporation and a proposed European Security Council. The combination raises near-term pressure on fuel prices and inflation while pointing to a structural pivot in how Europe sources metals, manages China risk and organizes its own security.
WARNING

Russia Extends Diesel Export Ban, Tightening Global Fuel Markets

Russia has extended its diesel export ban through October, removing a large chunk of seaborne diesel supply for at least another month. This is likely to lift middle-distillate cracks, support crude benchmarks via refinery margin dynamics, and pressure European and Latin American buyers to bid up alternative supplies.