#6
The Hacker News
general
June 15, 2026 at 09:59 UTC
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites
By [email protected] (The Hacker News)
AI Summary
Attackers compromised JavaScript files distributed via the CDN of Awesome Motive, affecting WordPress plugins OptinMonster, TrustPulse, and PushEngage in a supply-chain attack. The malicious code triggered only when a logged-in administrator loaded the page, silently creating a rogue admin account and installing a persistent backdoor plugin — a stealthy, privilege-aware infection vector affecting potentially hundreds of thousands of WordPress sites.
Relevance score: 80.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →