#plugins
-
BdThemes Supply-Chain Attack Creates Hidden WordPress Admins
An attacker compromised the infrastructure of premium plugin developer BdThemes and, through a poisoned JSON feed, created hidden administrator accounts on victims' sites.