Someone has apparently snaffled up 31 WordPress plugins and wedged a backdoor in each one
A significant security incident has compromised at least 31 WordPress plugins, with attackers injecting backdoors into each one. The attack represents a notable supply-chain security concern for WordPress users, as plugins are widely used extensions that add functionality to WordPress-powered websites.
WordPress plugins are popular tools used by website administrators to enhance site functionality, but they also represent a potential security vulnerability if not properly vetted. The incident highlights the importance of carefully checking the source and security history of third-party plugins before installation, as compromised plugins can provide attackers with unauthorized access to affected websites.
This type of attack—compromising legitimate software to distribute malware—is a known threat vector that affects both individual users and organizations. Website administrators using any of the affected plugins are advised to investigate their systems for signs of compromise and update or remove compromised versions immediately.