SecurityBleepingComputerabout 2 hours ago
Malicious WordPress Plugin Backdoors 1,500 Sites
1 min read
A threat actor compromised the website of the Admin Menu Editor Pro WordPress plugin, pushing malicious updates to over 200 customers. The updates, versions 2.35 and 2.36, installed a web shell and a hidden user account on affected sites. Developer Janis Elsts reported the incident began Monday and took the website offline for restoration.
Level
Hype check
Tap to vote and see what everyone thinks.