TechThe Hacker Newsabout 9 hours ago
ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack
1 min read
Multiple ShapedPlugin WordPress Pro plugins were compromised after attackers tampered with the official release channels, injecting backdoor code into builds distributed via Easy Digital Downloads. The supply chain compromise, assigned CVE-2026-10735 with a CVSS score of 9.8, affects only Pro plugin versions. Free plugins on WordPress.org remain unaffected.
Level
Hype check
Tap to vote and see what everyone thinks.
