Mal.Metrica Malware Exploits WordPress Vulnerabilities: 17,000+ Sites Hit

A Mal.Metrica campaign is actively compromising WordPress sites (notably via vulnerabilities in the Responsive theme, tagDiv Composer, and WP Go Maps) to present fake “Verify that you are a human” pop-ups that redirect visitors to scam and malware sites (e.g., rapid.tmediacontent.com); the report notes widespread impact (17,449 sites in 2024) and recommends patching, using WAFs, and user caution.