Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites

An attacker tampered with trusted JavaScript files used by WordPress sites running PushEngage, OptinMonster, and TrustPulse, turning those files into a way to break into the sites.

When a site administrator was logged in as the file loaded, the code created an admin account under the attacker’s control and installed a hidden plugin that opened a way back in. Ordinary visitors did not trigger it

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

London Gatwick has launched a robotic airport parking service

London Gatwick has launched a robotic airport parking service Source: Hacker News

Attack Update: Top 5 Attack-IPs auf doode.info – 31.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 34.212.200.27 — 1184 requests (recent log) 89.167.35.212 — 731 requests (recent log) 35.238.100.161 — 296 requests (recent

Attack Update: Top 5 Attack-IPs auf doode.info – 28.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 929 requests (recent log) 34.65.117.95 — 836 requests (recent log) 216.73.216.86 — 354 requests (recent