From helpnetsecurity.com
The attacks
The attackers are exploiting vulnerabilities in a number of WordPress plugins, namely:
- Bold Page Builder
- Blog Designer
- Live Chat with Facebook Messenger
- Yuzo Related Posts
- Visual CSS Style Editor
- WP Live Chat Support
- Form Lightbox
- Hybrid Composer
- All former NicDark plugins (nd-booking, nd-travel, nd-learning, etc.)