A new hacking campaign is using propagation to spread malicious scripts on WordPress sites by exploiting known vulnerabilities. Over 2000 websites have already been exploited and hackers are continuing attacks every day. After accessing the websites, hackers are injecting JavaScript to redirect users to scam websites that include fake advertisements, fake downloads, and even fake giveaways.
WordPress website owners are urged to disable primary folder modification in settings and be wary of potential attacks. Experts claim that these attacks will keep coming, so it is best to be aware of all the security options WordPress has to offer.
Read the full article from Cyware here: https://cyware.com/news/over-2000-wordpress-sites-hacked-to-propagate-scam-campaign-e94ef815