VulnHub

Real-time Cybersecurity News

Critical

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

The Hacker News
Actively Exploited
Malware

Overview

Cybersecurity researchers have identified a supply chain attack affecting BdThemes, a vendor known for its WordPress plugins. This incident has led to the temporary suspension of plugin downloads from the official WordPress repository. According to Wordfence researcher Paolo Tresso, the attack is notable because it did not involve any direct modifications to the source code within the repository. Instead, attackers exploited the system to create unauthorized administrative accounts for WordPress sites using affected plugins. This could allow unauthorized access to numerous WordPress installations, raising serious concerns for users relying on these plugins. WordPress site owners should remain vigilant and consider disabling affected plugins until further notice.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Affected Systems: BdThemes WordPress plugins
  • Action Required: Temporarily disable downloads of affected plugins; users should consider disabling these plugins on their sites.
  • Timeline: Newly disclosed

Original Article Summary

Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform's plugins team to temporarily disable their downloads. "Unlike traditional software supply chain attacks, zero source code files were modified within the official WordPress.org repository," Wordfence researcher Paolo Tresso said.

Impact

BdThemes WordPress plugins

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Temporarily disable downloads of affected plugins; users should consider disabling these plugins on their sites.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Malware.

Read Original Article

Related Coverage

OpenAI Pauses Some Development of Astra Model on Security Concerns

Infosecurity Magazine

OpenAI has decided to pause some testing of its upcoming Astra model due to emerging security concerns. This model is part of their efforts to advance artificial intelligence, but potential vulnerabilities have raised alarms about its safety. The company is implementing tighter controls on how and when the model can be tested, aiming to ensure that security risks are adequately addressed before further development continues. This move is significant as it reflects growing awareness in the tech community about the implications of AI systems and their potential misuse. OpenAI's decision highlights the need for careful consideration of security in AI development, which could have broad implications for users and developers alike.

Aug 11, 2026

Using LLMs for Vuln Discovery - Rishi Sharma - ASW #395

SCM feed for Latest

In a recent article, Rishi Sharma discusses how large language models (LLMs) can be utilized to discover vulnerabilities in software systems. Researchers are exploring the potential of LLMs to automate the identification of security flaws, which could significantly enhance the efficiency of vulnerability assessments. This approach may help security teams prioritize and address vulnerabilities more effectively, potentially reducing the risk of exploitation. As organizations increasingly rely on complex software, the ability to quickly and accurately discover vulnerabilities is crucial in protecting sensitive data and maintaining system integrity. This emerging use of AI in cybersecurity underscores the need for continuous innovation in threat detection.

Aug 11, 2026

Only Half of UK Manufacturers Have a Cyber Incident Response Plan

Infosecurity Magazine

A recent report from Make UK reveals that only about half of UK manufacturers have a cyber incident response plan in place, raising concerns about the industry's preparedness for cyber threats. Alarmingly, 30% of these manufacturers reported experiencing cyber incidents in the past year. The findings indicate significant gaps in cyber resilience among manufacturers, which could leave them vulnerable to future attacks. Without proper response plans, companies may struggle to recover from incidents, risking both financial loss and damage to their reputations. This situation calls for urgent action to bolster cybersecurity measures across the manufacturing sector, as the threat of cyberattacks continues to grow.

Aug 11, 2026

Mozilla Issues New Firefox GPG Key Following Exposure

SecurityWeek

Mozilla has issued a new GPG signing key for Firefox after the previous key was accidentally uploaded to a GitHub repository. This exposure led Mozilla to revoke the compromised key to maintain the integrity of their software signing process. Users who rely on GPG for verifying Firefox updates and packages need to switch to the new key to ensure they are receiving legitimate software. This incident emphasizes the importance of secure key management in software distribution, as any compromise can put users at risk of encountering malicious versions of the software. Mozilla is taking steps to prevent such occurrences in the future, but users must remain vigilant in managing their security settings.

Aug 11, 2026

An AI tool found 84 flaws in 5G network software and 23 of them still have no fix

Help Net Security

Researchers at Nanyang Technological University used AI agents to examine the software behind 4G and 5G phone networks and discovered 84 security flaws, with 83 confirmed by developers. Among these, 81 have been assigned CVE numbers, indicating their severity. One particularly concerning flaw could allow an attacker to hijack a subscriber’s data session, redirecting their internet traffic to themselves instead of to the intended destination. This poses significant risks to user privacy and data security. Alarmingly, 23 of the identified vulnerabilities currently lack fixes, raising concerns about the security of 5G networks as they continue to roll out globally.

Aug 11, 2026

Security researchers accidentally receive sensitive data through misconfigured email domains

SCM feed for Latest

Security researchers discovered that numerous companies are mistakenly sending sensitive information, such as injury reports and test credentials, to misconfigured email domains like @noreply.us and @noreply.net. These companies believe these addresses are inactive or not monitored, but the reality is that researchers have been receiving this confidential data due to the misconfiguration. This situation raises significant privacy concerns, as sensitive information is being exposed without the companies' knowledge. It highlights a crucial need for organizations to verify their email configurations to prevent unintended data leaks. If these issues are not addressed, they could lead to serious breaches involving personal or proprietary information.

Aug 10, 2026