A BdThemes supply chain attack poisoned a plugin API feed to run silent XSS in admin browsers, creating rogue admins across WordPress sites.

Related Posts:

• Fake AI Tools Malware Targets Developers Through GitHub
• DOUBLECUP: New ClickFix Loader Drops CountLoader and DeviceManager RAT
• Interlock Ransomware Abuses Volatility3 for Credential Theft

The post BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins appeared first on Daily CyberSecurity.