Home

Extend

Hashnode Pro
Hashnode for Agents

Resources

The foreword
Hashnode gql skill

Buildful - AI coding agent that delivers frontier-level results at a fraction of the cost Bug0 - The AI-native e2e QA regression testing Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Sign in

Search Hashnode

Search posts, tags, users, and pages

Discussion on "BdThemes: A WordPress Supply Chain Attack That Changed No Code At All" | Hashnode

Discussion

Vũ Nhật Lâm

Aug 20

BdThemes: A WordPress Supply Chain Attack That Changed No Code At All

Summary Not a single source code file in the WordPress.org repository was modified. No plugin update was released. No file on disk changed. Yet rogue administrator accounts were created on victim site

blog.fiscybersec.com17 min read

#bdthemes #wordpress #supply-chain #elementor #biggopti #xss #web-shell #mu-plugins #rogue-admin #optinmonster #arve #cve-2026-18072 #wordfence #threat-intelligence

Responses

Markdown supported · ⌘↵ to post

No responses yet.