A major WordPress supply chain attack has compromised more than 30 plugins from the EssentialPlugin suite, affecting hundreds of thousands of sites. The plugins were sold in early 2025 to a buyer who ...
A hot potato: WordPress plugins can significantly expand the native capabilities of the popular content management system, but they can also become a double edged sword. When malicious code finds its ...
Web engineer Austin Ginder has published a blog post detailing how backdoors were embedded in 31 plugins owned by Essential Plugin, a company that develops WordPress plugins. Someone Bought 30 ...