EssentialPlugin Supply Chain Attack — 31 WordPress Plugins Weaponized After 8 Months of Dormancy

Executive Summary In April 2026, more than 31 WordPress plugins from the EssentialPlugin portfolio (formerly WP Online Support) were permanently closed on WordPress.org after a PHP backdoor — planted