Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them.
anchor.host
Last week, I wrote about catching a supply chain attack on a WordPress plugin called Widget Logic. A trusted name, acquired by a new owner, turned into