Source: bleepingcomputer.com
A threat actor compromised the maintainer's website for the Admin Menu Editor Pro WordPress plugin and pushed malicious updates to over 200 customers. The tampered plugin versions created hidden user accounts, effectively backdooring more than 1,500 WordPress sites. This is a supply chain attack targeting WordPress plugin infrastructure. The attacker leveraged the legitimate update distribution mechanism to propagate the malicious code. Site administrators using the affected plugin versions are at risk of unauthorized administrative access. The attack highlights risks associated with third-party plugin ecosystems and the importance of verifying plugin integrity.
