ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

Multiple premium WordPress plugins from ShapedPlugin were backdoored after attackers compromised the vendor's build and distribution pipeline, causing Pro releases distributed outside WordPress.org to include malicious code that can enable remote code execution, credential theft, and unauthorized site access; site operators are advised to audit versions, disable affected plugins, scan for indicators of compromise, review logs, rotate credentials, and monitor vendor communications for verified clean releases.