CRITICAL ALERT: Large-scale exploitation campaign targeting website content management systems (CMS)

This advisory from ASD's ACSC warns of a broad, active exploitation campaign targeting multiple CMS platforms and plugins worldwide (including many small-to-medium Australian businesses) to deploy webshells via vulnerabilities such as unauthenticated file upload, RCE, SSRF and deserialization. The alert lists affected software and CVEs, describes impacts (defacement, credential capture, malware distribution, lateral movement), and provides immediate remediation steps: inspect for webshells, review logs, isolate compromised servers, remove persistence, restore from known-good backups, and patch vulnerable software.