■■■■□ Dozens of WordPress themes and plugins hosted on a developer’s website were backdoored with malicious code in the first half of September 2021 with the goal of infecting further sites.
The backdoor gave the attackers full administrative control over websites that used 40 themes and 53 plugins belonging to AccessPress Themes, a Nepal-based company that boasts of no fewer than 360,000 active website installations.
Backdoor Found in Themes and Plugins from AccessPress Themes
https://thehackernews.com/2022/01/hackers-planted-secret-backdoor-in.html
https://t.me/cKure/10595