RSS Feed/News Someone planted backdoors in dozens of WordPress plug-ins used in thousands of websites

[ENXF NET]

Someone planted backdoors in dozens of WordPress plug-ins used in thousands of websites | TechCrunch ​

Dozens of WordPress plug-ins were allegedly hijacked to push malware after they were sold to a new corporate owner.

techcrunch.com

These high-profile supply chain attacks have been happening a lot recently.. XZ Utils through linux, axios through npm, and now the WordPress plugin directory. There's no reason it can't happen here especially with so many plugins being abandoned or handed over.

Continue reading...