BdThemes plugins supply-chain hack creates rogue WordPress admins
%22%3E%3Cstop offset=%220%22 stop-color=%22hsl(218 44%25 96%25)%22/%3E%3Cstop offset=%221%22 stop-color=%22hsl(240 40%25 89%25)%22/%3E%3C/linearGradient%3E%3C/defs%3E%3Crect width=%22160%22 height=%2290%22 fill=%22url(%23g)%22/%3E%3Cg stroke=%22hsl(218 42%25 34%25)%22 fill=%22hsl(218 42%25 34%25)%22 opacity=%22.13%22%3E%3Crect x=%2296%22 y=%22-20%22 width=%2290%22 height=%2270%22 transform=%22rotate(24 120 20)%22 stroke=%22none%22/%3E%3C/g%3E%3Cg fill=%22none%22 stroke=%22hsl(218 42%25 34%25)%22 stroke-opacity=%22.44%22 stroke-width=%222.05%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22 transform=%22translate(46 28) scale(1.17) rotate(-8 24 24)%22%3E%3Crect x=%225%22 y=%226%22 width=%2238%22 height=%2211%22 rx=%223%22/%3E%3Crect x=%225%22 y=%2221%22 width=%2238%22 height=%2211%22 rx=%223%22/%3E%3Crect x=%225%22 y=%2236%22 width=%2238%22 height=%229%22 rx=%223%22/%3E%3C/g%3E%3C/svg%3E)
illustration
Most WordPress sites are compromised through something ordinary: an unpatched plugin, an abandoned theme, an account without two-factor. If you would rather updates and backups simply happened, CrockyHost hosting does them for you.
Keep reading
- New Evooo1Bot Linux botnet turns routers into traffic relay nodes BleepingComputer
- Hackers arrested over €30M bank fraud exploiting service provider flaw BleepingComputer
- Hackers exploit macOS Screen Sharing flaw to deploy Monero miner BleepingComputer
- The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI BleepingComputer
