A malicious actor found a struggling WordPress plugin company, bought it, and introduced malware to each product.

Dozens of WordPress plugins were allegedly hijacked to push malware after they were sold to a new corporate owner.

A popular brand of WordPress plugins was recently weaponized to download and spread malicious code. The new, potentially ...

More than 20,000 WordPress sites were compromised after malicious plugins with hidden backdoors spread harmful code, raising ...

More than 30 WordPress plugins in the EssentialPlugin package have been compromised with malicious code that allows ...

An attacker purchased 30+ WordPress plugins on Flippa, planted backdoors that lay dormant for eight months, then activated ...

WordPress plugin backdoor compromises 20,000+ sites through supply chain attack using blockchain evasion tactics and ...

Dozens of WordPress plugins were taken offline after a suspected supply-chain attack involving a malicious backdoor added ...

Hackers hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla, and pushed a malicious version ...

WordPress plugins are helpful. But they can also slow a site down, invite hackers and even cause a Google penalty. These are my top five considerations when choosing a WordPress plugin. The plugin is ...