Someone planted backdoors in dozens of WordPress plug-ins used in thousands of websites

What Happened

Backdoors were discovered in dozens of WordPress plugins after a new owner purchased Essential Plugin. The malicious code activated this month, distributing attacks to over 20,000 WordPress installations. Essential Plugin has 400,000 installs and 15,000 customers. Researchers warn WordPress users to remove affected plugins immediately. This marks the second WordPress plugin hijack in two weeks.

Key Entities

AI Tools