Escortwp
Monthly
Content destruction and covert data exfiltration in the EscortWP WordPress theme (all builds through 3.6.2) stem from a deliberately obfuscated, vendor-authored backdoor rather than an accidental coding flaw. Any unauthenticated remote attacker who knows the hard-coded per-build key can permanently delete every piece of the site's content, while the theme silently beacons the site URL, administrator email, and license key to a third-party server. Publicly available exploit code exists (reported by WPScan), though EPSS probability is low (0.14%, 4th percentile) and it is not on CISA KEV.
Content destruction and covert data exfiltration in the EscortWP WordPress theme (all builds through 3.6.2) stem from a deliberately obfuscated, vendor-authored backdoor rather than an accidental coding flaw. Any unauthenticated remote attacker who knows the hard-coded per-build key can permanently delete every piece of the site's content, while the theme silently beacons the site URL, administrator email, and license key to a third-party server. Publicly available exploit code exists (reported by WPScan), though EPSS probability is low (0.14%, 4th percentile) and it is not on CISA KEV.