Suspicious email from WordPress
-
Hello, I want to verify an email I received that looks like it’s from WordPress but seems fishy. It says:
‘Update woocommerce immediately
PHP Object Injection Vulnerability
As per research, a PHP Object Injection vulnerability in WooCommerce (CVE-2022-25789) was discovered that allows for escalating privileges using a unique injection method. Update your sites immediately. Your website will stop working on 23.11.2022.’
Is this legit or is this a phishing attack?? From email address is (email visible only to moderators and staff)
WP.com: Yes
Correct account: YesThe blog I need help with is: (visible only to logged in users)
-
-
and a link to confirm my words, https://secure.wphackedhelp.com/blog/woocommerce-hacked/
- The topic ‘Suspicious email from WordPress’ is closed to new replies.