Netcrook
#WordPress plugins
When the Vendor Update Turns Hostile: ShapedPlugin and the WordPress Trust Trap
A reported compromise of a plugin vendor’s update channel shows how routine maintenance can become a malware delivery path when the distribution layer itself is tampered with.
When a Premium WordPress Plugin Becomes the Trojan Horse
A reported backdoor in paid ShapedPlugin add-ons shows how a trusted update path can turn routine maintenance into a supply-chain risk.
When a Trusted Plugin Becomes the Weak Link
A reported issue around OptinMonster and related WordPress tools highlights how one tainted delivery path can create a broad trust problem for site owners.
One Tampered Script, Many Silent Victims: The WordPress Supply-Chain Trap
A trusted marketing embed became the weak link, showing how one upstream JavaScript change can put huge numbers of WordPress sites at risk without touching them one by one.
Thousands of WordPress Plugin Bugs Put the Extension Layer Back Under the Microscope
A quarterly vulnerability count for WordPress plugins points to a familiar security pattern: third-party code keeps widening the attack surface, with XSS and SQL Injection among the issues drawing attention.