WordPress Nightmare: Rogue Admins and SEO Spam Infect Plugins
Multiple WordPress plugins have been backdoored, creating rogue administrator accounts and injecting SEO spam. Users should check for suspicious accounts with usernames “Options” and “PluginAuth.”
Hot Take:
Looks like some WordPress plugins are moonlighting as malicious spies. Who knew your favorite plugin could be this two-faced?
Key Points:
- Multiple WordPress plugins have been backdoored to inject malicious code.
- Injected malware creates rogue admin accounts to perform arbitrary actions.
- Malicious JavaScript is also being added to website footers for SEO spam.
- Rogue admin usernames are “Options” and “PluginAuth.”
- Earliest signs of the attack date back to June 21, 2024.
Already a member? Log in here