Published: · Region: Global · Category: cyber

WordPress Supply-Chain Breach Exposes Millions of Sites to Rogue Admin Takeovers

Attackers compromised several popular BdThemes WordPress plugins by poisoning a JSON file used inside site dashboards, enabling silent creation of rogue admin accounts and web shells. The supply-chain breach turns routine plugin updates into an intrusion vector, raising fresh questions for small businesses, media outlets, and governments that rely on WordPress for critical web infrastructure.

A supply-chain attack on multiple popular WordPress plugins has turned a routine administrative function into a potential backdoor, exposing millions of websites to silent takeover and long-term compromise. For site owners who assumed that updating plugins inside their dashboard was a basic security best practice, the incident is an uncomfortable reminder that trusted components can be weaponized upstream. Security researchers disclosed that seven plugins maintained by BdThemes were compromised after attackers gained write access to a JSON file hosted on vendor-controlled infrastructure. That file was fetched by the affected plugins from within the WordPress administration panel. By poisoning the data delivered to sites that installed the plugins, the attackers were…

Pro features include

  • 60+ analytical tools across markets and intelligence
  • Custom alerts, watchlists, and AOI monitoring
  • Daily Pro brief at 6 PM ET — 12 hours before free tier
  • Conflict deep dives and premium research products

Related Coverage

GLOBAL

WordPress Supply‑Chain Backdoor Puts Thousands of Sites and Users at Silent Risk

Attackers gained write access to data used by seven popular BdThemes WordPress plugins, poisoning JSON files to create rogue admin accounts and web shells on sites that installed updates. The compromise shows how a quiet supply‑chain breach in a single plugin vendor can cascade across thousands of websites and the users who trust them.
GLOBAL

WordPress Supply-Chain Attack Turns Popular Plugins Into Rogue Admin Backdoors

Attackers gained write access to data used by seven BdThemes WordPress plugins, poisoning JSON feeds to silently create rogue admin accounts and web shells on vulnerable sites. The incident turns a routine plugin update path into a supply‑chain breach with consequences for website owners, hosting providers and any business relying on WordPress for critical services.
GLOBAL

WordPress Supply-Chain Attack Lets Hackers Create Rogue Admins, Putting Millions of Sites at Risk

Attackers abused updates to seven popular BdThemes plugins to poison JSON data and silently create rogue admin accounts and web shells on WordPress sites, prompting the plugins’ suspension. For businesses, media outlets and governments running on WordPress, the breach turns a routine update channel into a potential backdoor, with implications from espionage to ransomware.
WARNING

Reports: Houthi Missile Kills 3 on Saudi Ship in Bab el-Mandeb, Trade Route Hit

A Saudi commercial vessel was reportedly struck by a missile in the Bab el‑Mandeb Strait around 07:35 UTC, killing three crew members, according to Iranian outlet ISNA. A lethal hit inside one of the world’s tightest shipping chokepoints immediately raises operational risk for Red Sea traffic, insurers and energy traders already pricing repeated attacks in the corridor between Asia and Europe.
WARNING

US Pours $17.5 Billion Into New Nuclear Reactors, Rewiring Power and Fuel Outlook

At 07:00 UTC, Washington committed $17.5 billion to build new nuclear reactors, a scale of support that can reshape the U.S. power mix, long‑term demand for uranium, and capital flows in the energy sector. The move bolsters grid reliability and decarbonization goals but also redraws the competitive map for gas, coal, renewables, and industrial users exposed to U.S. electricity prices.
WARNING

Hackers Hit Polish CHP Turbine, Expose New Grid Vulnerability

Hackers shut down a turbine at a Polish combined heat and power plant by pivoting through a private cellular network into the plant’s OT systems, marking the first such incident seen by CERT via this APN route. While the direct physical impact is small, the demonstration of a new attack vector into European generation assets adds a modest risk premium to regional power and gas markets.