Over 17,000 WordPress websites have fallen victim to multiple Balada Injector campaigns that exploit known flaws in premium theme plugins, as per a report by Bleeping Computer. Sucuri’s April 2023 report revealed that Balada Injector has been active since 2017, affecting nearly one million WordPress sites. The latest campaign targets a specific weakness known as CVE-2023-3169 found in tagDiv Composer, …
