News for hackers. Stuff that matters.

Backdoors discovered in 40 WordPress Themes and 53 Plugins

Over 40 WordPress themes and 53 plugins have been found to be infected with backdoor shells, by unknown hackers exploiting several sites to gain admin access.

According to Jetpack, earlier versions of the popular add-ons were allegedly used to propagate backdoors as part of a supply chain attack, therefore customers of AccessPress Themes should opt for updated versions of the company’s WordPress themes and plug-ins.

( 3 comments | 6 points | on HN )
Re:Backdoors discovered in 40 WordPress Themes and 53 Plugins by Phreaker00 on Tuesday January 25, 2022 @07:21AM (#30070981)
A link to the article on Jetpack's website: https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-...
Re:Backdoors discovered in 40 WordPress Themes and 53 Plugins by ramoswriter on Tuesday January 25, 2022 @07:46AM (#30071160)
Is anyone even surprised by these anymore?
Re:Backdoors discovered in 40 WordPress Themes and 53 Plugins by Im_your_dada on Tuesday January 25, 2022 @10:27AM (#30072840)
Seems like a lot of social plugins that allow api access. Keep WP simple dont add shit to it