BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
- Posted on August 11, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.
