More than 30 WordPress plugins were shut down after a supply-chain backdoor compromised thousands of sites through the ...

An XSS bug and a PHP object-injection vulnerability are present in a plugin used by hundreds of thousands of websites. Newsletter, a WordPress plugin with more than 300,000 installations, has a pair ...

Newsletter users are urged to update the plugin to the 6.8.3 version as soon as possible to block attacks designed to add rogue admins or to inject backdoors on their sites given that threat actors ...

A malicious actor found a struggling WordPress plugin company, bought it, and introduced malware to each product.

A popular brand of WordPress plugins was recently weaponized to download and spread malicious code. The new, potentially ...