Supply Chain Attack Discovered in BdThemes WordPress Plugins
Supply chain attack in BdThemes WordPress plugins: hidden admin accounts created.
Several WordPress plugins developed by BdThemes were compromised in a supply chain attack, allowing attackers to create hidden admin accounts by manipulating JSON data sent to the admin panel. This led to the temporary removal of affected plugins from the WordPress.org directory.