Ross McKayGF Eway Pro v1.20.0
• fixed: prevent double-handling of Responsive Shared Page transaction with 3D Secure
jbz🚨 Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach - Patchstack
https://patchstack.com/articles/critical-malware-found-in-gravityforms-official-plugin-site/
Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach - Patchstack
Update 7-11-2025 14:10 UTC: A version 2.9.13 has been released to ensure customers can safely update to a new version without a backdoor present. In addition, Namecheap (the domain registrar) has suspended the domain name gravityapi.org to avoid successful exploitation of the backdoor portion that connects to this domain name. Update 7-11-2025 12:38 UTC: We […]
Marcel SIneM(S)US
GripNews🌕 GravityForms 官方插件遭植入惡意程式碼，供應鏈安全漏洞曝光
➤ 供應鏈攻擊風險再升級，GravityForms 插件成受害者
✤ https://patchstack.com/articles/critical-malware-found-in-gravityforms-official-plugin-site/
安全研究人員發現 GravityForms 官方插件遭植入惡意程式碼，顯示供應鏈遭到入侵。此惡意程式碼透過 `update_entry_detail` 函數向 `gravityapi.org` 發送網站資訊，並可能在網站上寫入惡意檔案。GravityForms 已發布 2.9.13 版本修補此漏洞，Namecheap 也已暫停 `gravityapi.org` 域名。初步調查顯示受影響範圍可能有限，但 Patchstack 團隊正在持續監控情況。
+ 「這太可怕了！我正在使用 GravityForms，必須立刻更新。這也讓我開始擔心其他插件的安全性。」
+ 「Patchstack
#安全漏洞 #WordPress #GravityForms #供應鏈攻擊
➤ 供應鏈攻擊風險再升級，GravityForms 插件成受害者
✤ https://patchstack.com/articles/critical-malware-found-in-gravityforms-official-plugin-site/
安全研究人員發現 GravityForms 官方插件遭植入惡意程式碼，顯示供應鏈遭到入侵。此惡意程式碼透過 `update_entry_detail` 函數向 `gravityapi.org` 發送網站資訊，並可能在網站上寫入惡意檔案。GravityForms 已發布 2.9.13 版本修補此漏洞，Namecheap 也已暫停 `gravityapi.org` 域名。初步調查顯示受影響範圍可能有限，但 Patchstack 團隊正在持續監控情況。
+ 「這太可怕了！我正在使用 GravityForms，必須立刻更新。這也讓我開始擔心其他插件的安全性。」
+ 「Patchstack
#安全漏洞 #WordPress #GravityForms #供應鏈攻擊
Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach - Patchstack
Update 7-11-2025 14:10 UTC: A version 2.9.13 has been released to ensure customers can safely update to a new version without a backdoor present. In addition, Namecheap (the domain registrar) has suspended the domain name gravityapi.org to avoid successful exploitation of the backdoor portion that connects to this domain name. Update 7-11-2025 12:38 UTC: We […]
Hacker NewsMalware Found in Official GravityForms Plugin Indicating Supply Chain Breach
https://patchstack.com/articles/critical-malware-found-in-gravityforms-official-plugin-site/
#HackerNews #Malware #SupplyChain #GravityForms #Security #Breach #CyberThreats
Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach - Patchstack
Update 7-11-2025 14:10 UTC: A version 2.9.13 has been released to ensure customers can safely update to a new version without a backdoor present. In addition, Namecheap (the domain registrar) has suspended the domain name gravityapi.org to avoid successful exploitation of the backdoor portion that connects to this domain name. Update 7-11-2025 12:38 UTC: We […]
The New Oil#WordPress #GravityForms developer hacked to push backdoored plugins
@futtta Gravity Forms malware confirmed by Gravity Forms:
ManiabelChrisDer manuelle Download des WordPress-Plugins GravityForms war zwischen dem 10. und 11. Juli 2025 mit Malware verseucht, berichtet
https://patchstack.com/articles/critical-malware-found-in-gravityforms-official-plugin-site/
#wordpress #malware #gravityforms #infosec
https://patchstack.com/articles/critical-malware-found-in-gravityforms-official-plugin-site/
#wordpress #malware #gravityforms #infosec
Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach - Patchstack
Update 7-11-2025 14:10 UTC: A version 2.9.13 has been released to ensure customers can safely update to a new version without a backdoor present. In addition, Namecheap (the domain registrar) has suspended the domain name gravityapi.org to avoid successful exploitation of the backdoor portion that connects to this domain name. Update 7-11-2025 12:38 UTC: We […]
frank goossens 🇧🇪🇪🇺Gravityforms victim of supply chain attack?
https://patchstack.com/articles/critical-malware-found-in-gravityforms-official-plugin-site/
Malware Found in Official GravityForms Plugin Indicating Supply Chain Breach - Patchstack
Update 7-11-2025 14:10 UTC: A version 2.9.13 has been released to ensure customers can safely update to a new version without a backdoor present. In addition, Namecheap (the domain registrar) has suspended the domain name gravityapi.org to avoid successful exploitation of the backdoor portion that connects to this domain name. Update 7-11-2025 12:38 UTC: We […]
Liam DempseyI'm grateful to @mattmedeiros and #GravityForms for the opportunity to chat #WordPress, #clients, #agency work, and more.
Give it a listen. Let me know what you think of it.
https://breakdown.transistor.fm/episodes/how-liam-dempsey-powers-agency-projects-with-gravity-forms
