Over 17,000 WordPress Sites Compromised by Balada Injector in September 2023More than 17,000 WordPress websites have been compromised in the month of September 2023 with a malware known as Balada Injector, nearly twice the number of detections in August.
Of these, 9,000 of the websites are said to have been infiltrated using a recently disclosed security flaw in the tagDiv Composer plugin (CVE-2023-3169, CVSS score: 6.1) that could be exploited by unauthenticated users
Source: Over 17,000 WordPress Sites Compromised by Balada Injector in September 2023 (https://thehackernews.com/2023/10/over-17000-wordpress-sites-compromised.html)