Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:exclusiveaddons:exclusive_addons_for_elementor:*:*:*:*:*:wordpress:*:*

2 briefs RSS
low advisory

PHP File Creation in WordPress Plugin Directory

Attackers commonly establish persistence on compromised Linux WordPress web servers by creating malicious PHP files, often web shells, within the WordPress plugin directory, enabling remote access and command execution following initial compromise of a public-facing application.

WordPress persistence initial-access execution web-shell linux endpoint threat-detection vulnerability
1r 3t 1c 1i updated
low advisory

Webshell Reconnaissance Command Detection

This brief describes detection of common reconnaissance commands executed through webshells on Windows systems, enabling defenders to identify post-exploitation discovery activities.

webshell discovery reconnaissance attack.persistence attack.discovery attack.t1505.003 attack.t1018 attack.t1033 +1
1r 10t 1c