Anti-Social: Popular WordPress Sharing Plugin Linked To Payday Loan Spam
ID: 4e130e56-edcf-5279-8ce5-80ced65cc9d7
STIX ID: report--4e130e56-edcf-5279-8ce5-80ced65cc9d7
Feed Name: Security Ledger
Threat Score
A widely used WordPress plugin, Social Media Widget (SMW), was found to contain malicious code in a recent update that remotely inserted Pay Day Loan spam text and links into sites using the plugin; the compromise affected many installs (the plugin had ~935,000 downloads) and WordPress removed it from the official repository while security firms advised immediate removal.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.