Credit: The original article is published here.
A malicious actor found a struggling WordPress plugin company, bought it, and introduced malware to each product.
WordPress websites under attack — expert report says dozens of plugins hijacked to target thousands of sites
![[Aggregator] Downloaded image for imported item #120954](https://kcmicro.com/wp-content/uploads/2026/04/N6EmHQVVkmEHHmq7P3oCec-1280-80-800x500.jpg "[Aggregator] Downloaded image for imported item #120954")
![[Aggregator] Downloaded image for imported item #120957](https://kcmicro.com/wp-content/uploads/2026/04/yhG7RezFkb6DnQLwncsCva-1280-80-800x500.jpg "[Aggregator] Downloaded image for imported item #120957")
![[Aggregator] Downloaded image for imported item #70863](https://kcmicro.com/wp-content/uploads/2025/12/6tpjfeoXjA8gSiFuf6Eaee-1280-80-800x500.jpg "[Aggregator] Downloaded image for imported item #70863")