BleepingComputer
@BleepinComputer
Hackers hijack Convertr analytics script to steal payment card data t.co/2AbAACgT9j t.co/2AbAACgT9j
Convertr
Security incidents tagged Convertr. Newest first.
1 Convertr incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 1
- Patched
- 1
- Days without an incident
- 1
- Longest quiet run: 1 day (Oct 25–Oct 25)
- Patched
Magecart skimmer planted in Convertr's self-hosted Plausible tracker hits Brazilian checkouts
From Oct 24 2026 a Brazilian Magecart group appended a card skimmer to the Plausible analytics tracker hosted on Convertr's own server. Convertr runs the online stores and checkout for dozens of Brazilian fashion brands, and every checkout.convertr page loaded that file, so card numbers, expiry dates, CVVs, cardholder names and CPF numbers were sent to the attacker. Sansec suspects the entry point was CVE-2026-8467 in Convertr's never-updated Plausible Community Edition 3.0 (unconfirmed). Convertr removed the skimmer and upgraded Plausible on Oct 27.
Convertr e-commerce checkout (self-hosted Plausible CE tracker)Since Oct 24, 2026
