An attacker purchased 30+ WordPress plugins on Flippa, planted backdoors that lay dormant for eight months, then activated ...

A malicious actor found a struggling WordPress plugin company, bought it, and introduced malware to each product.

Dozens of WordPress plugins have been compromised by an unknown actor who planted backdoors in popular add-ons after buying ...

More than 30 WordPress plugins were shut down after a supply-chain backdoor compromised thousands of sites through the ...

Vibe coding WordPress plugins with AI can raise concerns about whether a plugin follows best practices for compatibility and security. WordPress.org’s Plugin Check Plugin offers a solution for those ...

A popular brand of WordPress plugins was recently weaponized to download and spread malicious code. The new, potentially ...

Dozens of WordPress plugins were taken offline after a suspected supply-chain attack involving a malicious backdoor added ...

More than 30 WordPress plugins in the EssentialPlugin package have been compromised with malicious code that allows ...

Hackers can now take over WordPress sites instantly using a simple plugin flaw ...

WordPress.org announced that plugins and themes that are pirated versions of paid plugins and themes will be removed from the official WordPress repositories. The WordPress community debated if that ...