Skip to content
Threat Feed
Subscribe

Vendor

Automattic

1 brief RSS
low advisory

PHP File Creation in WordPress Plugin Directory

Attackers commonly establish persistence on compromised Linux WordPress web servers by creating malicious PHP files, often web shells, within the WordPress plugin directory, enabling remote access and command execution following initial compromise of a public-facing application.

WordPress persistence initial-access execution web-shell linux endpoint threat-detection vulnerability
1r 3t 1c