Hacked WordPress Plug-in Put On Double, Secret Probation
ID: 6591bde4-b99a-502e-97b5-395d03844b3d
STIX ID: report--6591bde4-b99a-502e-97b5-395d03844b3d
Feed Name: Security Ledger
Threat Score
A widely used WordPress plugin (Social Media Widget, over one million downloads) was pulled from and later restored to the official WordPress plugin directory after discovery of malicious PHP code that injected SEO spam links to payday loan sites; the plugin owner says the code was introduced by a third‑party contractor and the offending changes have been removed, with WordPress administrators placing the plugin under increased monitoring.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.