An attacker purchased 30+ WordPress plugins on Flippa, planted backdoors that lay dormant for eight months, then activated ...
A malicious actor found a struggling WordPress plugin company, bought it, and introduced malware to each product.