Funnel Builder WordPress plugin bug exploited to steal credit cards

Multiple high-impact security incidents and active exploits were reported: a critical Funnel Builder WordPress plugin flaw is being exploited to inject malicious JavaScript into WooCommerce checkout pages and steal credit cards; other WordPress plugins (Avada Builder, Burst Statistics) have vulnerabilities enabling credential and admin-account theft. A supply-chain attack compromised the node-ipc npm package and the broader TanStack ecosystem (impacting OpenAI), pushing credential-stealing malware; the REMUS infostealer continues evolving to harvest sessions and tokens. Cisco disclosed an SD‑W