WordPress, one of the most widely used content management systems in the world, is an important component cyber attacked exposed. According to information obtained, hackers have integrated malicious code into five WordPress plugins. This is according to estimates about 36 thousand It affected the website.

The attack detected by cybersecurity firm Wordfence, BLAZE Retail Widget, Social warfare, Contact Form 7 Multi-Step Add-on, Wrapper Link Elementor and Simply Show Hooks. Cybersecurity experts know who or what is behind the attack. they couldn’t detect it.

Full control over the sites offered

According to research, malicious codes are added to websites via plug-ins. create administrator accounts provided. It also ensures that websites appear in the foreground of search results. substantive additions finished.

How many users have been affected by the latest cyber attack via WordPress plugins? now Unknown. However, it was determined that the attack took place on June 21, 2024. Furthermore, the plugin called Social Warfare was actively used by at least 30,000 websites. Hence the scale of the attack it’s too big We can say it easily.