Critical WooCommerce Plugin Flaw Exploited to Plant PHP Web Shells

Threat actors are actively exploiting a critical security flaw in the WooCommerce Wholesale Lead Capture WordPress plugin. The vulnerability allows unauthenticated attackers to upload arbitrary files, including PHP backdoors, leading to remote code execution. Administrators are strongly advised to update the affected plugin immediately to prevent system compromise.