Conversation

This is pretty clever. A phish going around spoofing Wordpress and telling people to install a security update that references a fake CVE. In this case, the "patch" is a website backdoor.

https://www.wordfence.com/blog/2023/12/psa-fake-cve-2023-45124-phishing-scam-tricks-users-into-installing-backdoor-plugin/