BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.
BdThemes supply chain attack poisons JSON feed to create rogue WordPress admins and deploy web shells without code changes.
Leeron is a New York-based writer who specializes in covering technology for small and mid-sized businesses. Her work has been featured in publications including Bankrate, Quartz, the Village Voice, ...