Attackers have compromised popular WordPress plugins by injecting malicious code into their scripts, allowing them to install hidden backdoors on thousands of websites without the site owners' knowledge. You should immediately audit all WordPress plugins
Read the full article: https://thehackernews.com/2026/06/popular-wordpress-plugin-scripts.html