WORDPRESS PLUGIN BACKDOOR HITS 1,500+ SITES

A compromised Admin Menu Editor Pro plugin distributed malicious updates to over 200 customers, creating hidden administrator accounts on approximately 1,500 WordPress sites. A threat actor gained access to the plugin maintainer's website and pushed weaponized versions.