Hackers Can Abuse Logged-In WordPress Admin Sessions to Secretly Install PHP Backdoors
WordPress administrators often keep their dashboard open in the same browser they use for everyday browsing. A new attack chain shows why that habit is risky. Researchers have documented a JavaScript loader that waits for a signed-in administrator to visit a compromised page, then uses that browser’s trusted session to install a hidden PHP backdoor […]
The post https://cybersecuritynews.com/logged-in-wordpress-admin-sessions/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/logged-in-wordpress-admin-sessions/
Cyber Security News (RSS Feed)
npub13p…p5djv
2026-10-27 02:08:23 UTC
Author Public Key
npub13pstz4yme247djhn5cqs8wdrnwq26n5x8cvnt03dlep843la84ns0p5djvSeen on
wss://nostr.data.hausPublished at
2026-10-27 02:08:23 UTCEvent JSON
{
"id": "4937eb6a78721e05de3d1174f352b8308cb6457345b9eebbc745fe4d0087dacc",
"pubkey": "8860b1549bcaabe6caf3a60103b9a39b80ad4e863e1935be2dfe427ac7fd3d67",
"created_at": 1793066903,
"kind": 1,
"tags": [
[
"t",
"Cyber Security News"
],
[
"t",
"Threats"
],
[
"t",
"cyber security"
],
[
"t",
"cyber security news"
],
[
"proxy",
"https://cybersecuritynews.com/feed/#https%3A%2F%2Fcybersecuritynews.com%2Flogged-in-wordpress-admin-sessions%2F",
"rss"
]
],
"content": "Hackers Can Abuse Logged-In WordPress Admin Sessions to Secretly Install PHP Backdoors\n\nWordPress administrators often keep their dashboard open in the same browser they use for everyday browsing. A new attack chain shows why that habit is risky. Researchers have documented a JavaScript loader that waits for a signed-in administrator to visit a compromised page, then uses that browser’s trusted session to install a hidden PHP backdoor […]\n\nThe post https://cybersecuritynews.com/logged-in-wordpress-admin-sessions/ appeared first on https://cybersecuritynews.com.\n\nhttps://cybersecuritynews.com/logged-in-wordpress-admin-sessions/",
"sig": "d6298ea409f3ea6f06a83546b26cd6ae6c91086353ded4b959bfabb7a356fb8edd710966bb1443bc52ad99c662344b317ef7bc5c670a30f887be795335068760"
}