WORDPRESS PLUGIN BACKDOOR HITS 1,500+ SITES

The Admin Menu Editor Pro plugin, used to customize WordPress admin interfaces, became a vector for widespread compromise after an attacker breached the developer's infrastructure. Malicious updates injected code that established hidden user accounts, granting unauthorized administrative access to affected installations. The compromise went undetected until discovered, with the full scope still being assessed. WordPress site owners using Admin Menu Editor Pro should immediately update to patched versions and audit user accounts for unauthorized entries. Security researchers recommend verifying plugin integrity and monitoring for suspicious administrative activity. The incident highlights risks in the WordPress plugin ecosystem, where compromised legitimate tools can bypass security defenses. Site administrators should implement robust access controls and maintain regular backups as protective measures against plugin-based attacks.