BdThemes Supply Chain Attack Poisons JSON to Create Rogue Word Press Admins
Wordfence researchers reported a supply chain compromise of WordPress plugin vendor BdThemes in which attackers gained write access to a DigitalOcean Spaces bucket and replaced legitimate promotional JSON with crafted payloads, exploiting an XSS flaw in...