Security News BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins TheHackerNews Daniel Bender 11 Aug 2026 Share BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.
