DevBleepingComputerabout 3 hours ago
BdThemes plugins supply-chain hack creates rogue WordPress admins
1 min read
A threat actor compromised BdThemes' infrastructure, poisoning a JSON feed to create rogue admin accounts via an XSS flaw in the Biggop Library. The attack started June 23, affected plugins were pulled from WordPress.org on August 8, and remains unpatched.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
