Hackers exploit Convertr analytics script to steal payment card data
Attackers compromised a shared Convertr analytics script on e-commerce sites to steal payment card data during checkout, affecting multiple retailers using this third-party script.
Tag
#Ecommerce Security
3 results in the archive.
Critical BlockStrap Flaw Allows Code Execution on Magento Servers
A critical vulnerability (CVE-2026-103849) in BlockStrap impacts Magento and Adobe Commerce platforms, enabling potential arbitrary PHP code execution on e-commerce servers.
BigCommerce Alerts Merchants of Data Breach via Ribon Apps
BigCommerce informed merchants of data breaches after attackers compromised credentials of third-party Ribon apps to inject malicious scripts into stores, highlighting risks from third-party applications in ecommerce.