News for hackers. Stuff that matters.

A comment on WordPress themes, plugins backdoored in supply chain attack. Parent comment

Re:WordPress themes, plugins backdoored in supply chain attack by IncRnd on Sunday January 23, 2022 @12:40AM (#30043906)
That's not the timeline. It was a single day from contact to removal of compromised plugins. According to the article, the issue was that the vendor's contact form didn't work, not that the vendor didn't quickly remove the plugins.

You are also confusing plugins with themes. They are not exactly the same.

[ Parent | on HN ]
Re:WordPress themes, plugins backdoored in supply chain attack by jcun4128 on Sunday January 23, 2022 @10:39AM (#30046938)
> vendor's contact form didn't work

Had this happen recently to a site. The SMTP password was set wrong and I don't know how many months/years this form just failed to submit but no one was aware of it... was for a landing page type site.

[ Parent | on HN ]