Dozens of WordPress plugins have been compromised by an unknown actor who planted backdoors in popular add-ons after buying ...

WordPress plugin backdoor compromises 20,000+ sites through supply chain attack using blockchain evasion tactics and ...

A popular brand of WordPress plugins was recently weaponized to download and spread malicious code. The new, potentially ...

Dozens of plug-ins for WordPress have been taken offline after a backdoor was found that allowed attackers to distribute ...

More than 30 WordPress plugins in the EssentialPlugin package have been compromised with malicious code that allows ...

Dozens of plug-ins for WordPress have been taken offline after a backdoor was discovered that allowed malicious code to be distributed to thousands of ...

An attacker purchased 30+ WordPress plugins on Flippa, planted backdoors that lay dormant for eight months, then activated ...

Typically what happens is that a plugin contains a weakness (a vulnerability) that allows an attacker to compromise individual sites that use that version of a plugin. But these compromises are ...