Hackers Exploit XSS Vulnerabilities in Ninja Forms and WPC Product Bundles WordPress Plugins

Hackers are actively exploiting stored cross-site scripting (XSS) vulnerabilities in two WordPress plugins: Ninja Forms and WPC Product Bundles for WooCommerce. The attackers are using these vulnerabilities to install backdoors on compromised WordPress sites and create rogue administrator accounts. The exploitation targets these two unrelated plugins through stored XSS flaws that allow malicious code injection.