WordPress Plugin Hacked Since 2020 to Inject Malicious Code Silently
A massive supply chain attack has been uncovered in the Quick Page/Post Redirect Plugin, a popular WordPress plugin with over 70,000 active installations. Security researcher Austin Ginder discovered a dormant backdoor introduced five years ago that silently injects arbitrary code into websites. The malicious code bypassed official security checks by leveraging a custom remote update […] The post WordPress Plugin Hacked Since 2020 to Inject Malicious Code Silently appeared first on Cyber Security News.
A dormant backdoor in the Quick Page/Post Redirect Plugin, used by over 70,000 WordPress installations, has been exploited since 2020 to silently inject malicious code into affected websites. This supply chain attack bypassed official security checks through a custom remote update mechanism.
Read the full article
This is a curated summary. The complete article is available at Cyber Security News.