Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

Open-Weight Model Publishing
Critical infrastructure security
Agentic Coding Tools
Developer Platform Governance
WordPress Plugin Security
Public Health Surveillance Data
AI infrastructure M&A
Computer-use agents
Software Supply Chain Security
Frontier model launch

How this is made

Today For You My Stack Off Radar Search

other

Mushr00w_upl.php

PHP file-uploader web shell dropped in the Super Forms attacks, disguised behind a data:image/gif;base64 content type and used to stage further payloads.

Known aliases

Mushr00w Uploader

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 distinct publisher

Attackers plant PHP web shells through two unauthenticated WordPress upload flaws

Wordfence blocked more than 250,000 attempts against Super Forms and 190,000 against Elementor Pro. The Super Forms campaign has been running since July 14, so unpatched sites need a look through their uploads directories.

Publishers:thehackernews.com

Reality

Evidence58
Adoption72
Hype gap+14
Incentives66

Confidence60

Mushr00w_upl.php — other — Clarity Today