Fake WordPress security advisory pushes backdoor plugin

December 4, 2023 at 12:19PM WordPress security experts are warning of phishing emails with fake security advisories asking admins to install a malicious plugin, which creates a hidden user and downloads a backdoor to the site, potentially for injecting ads, stealing data, or blackmail. Users are urged to be cautious. **Key Takeaways from Meeting Notes … Read more