ShellCodeX Intelligence Brief
CRITICAL
Cybersecurity
BdThemes plugin supply-chain compromise planted rogue WordPress admins
Source headline: BdThemes plugins supply-chain hack creates rogue WordPress admins
Threat level
Critical
Signal strength
85/100
Source confidence
1 source
Published
2 hours ago
Intelligence Summary
BdThemes’ upstream systems were compromised, enabling tampering with a remote JSON feed used by its WordPress plugin ecosystem. The modified feed caused affected sites to create rogue WordPress administrator accounts in users’ browsers. This supply-chain manipulation can grant unauthorized access and persistence within impacted WordPress instances. The issue highlights risks when trusted update or configuration feeds are altered upstream. Site owners should review for unexpected admin accounts and investigate BdThemes plugin update and feed integrity.
Recommended Action
Prioritize immediate review, validate exposure, and patch or mitigate affected systems.
Topics
Original reporting
BleepingComputer
BdThemes plugins supply-chain hack creates rogue WordPress admins
Open original source