Someone Planted Backdoors In Dozens Of WordPress Plugins Used In Thousands Of Websites
WordPress backdoor attack compromises plugins, exposing thousands of websites to malicious code and supply chain risks.
Matilda
Someone Planted Backdoors In Dozens Of WordPress Plugins Used In Thousands Of Websites
A Massive WordPress Backdoor Attack Is Raising Alarms A major WordPress backdoor attack has forced dozens of plugins offline, potentially exposing thousands of websites to malicious code. The issue stems from a supply chain compromise, where attackers quietly inserted backdoors into widely used plugins after a change in ownership. If you run a WordPress site, this incident highlights a critical question: how safe are your plugins, and could your site already be affected? What Happened in the WordPress Plugin Security Breach? The incident centers around plugins built for WordPress, the world’s most popular content management system powering millions of websites globally. These plugins, designed to extend functionality, became the entry point for a sophisticated cyberattack. Security researchers discovered that dozens of plugins were quietly modified to include hidden backdoors. These backdoors allowed attackers to remotely inject malicious code into any website running the compromised plug…
