> TritonInfoSec News
Home / Sep 16, 2026 / Story
0
#7 BleepingComputer general September 15, 2026 at 20:34 UTC

Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

By Bill Toulas

AI Summary

A threat actor compromised the maintainer's website for the Admin Menu Editor Pro WordPress plugin and pushed malicious updates to over 200 customers, resulting in backdoored installations across approximately 1,500 WordPress sites with hidden admin accounts created for persistent access. This supply-chain-style attack on a premium plugin highlights the risk of automatic plugin updates in WordPress environments where the upstream vendor's own infrastructure is compromised.

Read full article → https://www.bleepingcomputer.com/news/security/mal…

Relevance score: 85.0/100

# More from September 16

  1. 1
    Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution The Hacker News
  2. 2
    Cisco patches Secure Email Gateway zero-day exploited in attacks BleepingComputer
  3. 3
    CISA: Critical VMware RCE flaw now exploited by ransomware gangs BleepingComputer
  4. 4
    China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE The Hacker News
  5. 5
    Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases SecurityWeek
  6. 6
    Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists The Hacker News
  7. 8
    Japan's Digital Agency says VPN flaw exposed 246,000 personnel records BleepingComputer
  8. 9
    Cisco warns customers of actively exploited zero-day in email gateways CyberScoop
  9. 10
    KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens The Hacker News