WordPress sites are being hit by sneaky code that can steal credit card data

WordPress.

A vulnerability in a WordPress plugin is being abused to install malicious code and steal people’s payment data, experts have warned.

A report from cybersecurity researchers Sucuri, who discovered the attack, claim Dessky Snippets, a relatively unknown WordPress plugin, allows website administrators to add custom PHP code to their sites.