TechJuice

Hackers Just Compromised Seven WordPress Plugins Without Changing Any Code

BdThemes supply chain attack poisoned JSON API exploiting XSS vulnerability to create rogue WordPress admin accounts and install webshells.