Threat Intelligence: WordPress Plugin WPML Hacked

WPML (600,000 users) experienced an insider-driven compromise where a suspected former employee accessed the website database, sent mass emails using customer domains, and used an open backdoor to deface the homepage; no financial data was reported stolen, but account compromise was possible, prompting a full server rebuild and mandatory password resets.