WordPress plugin supply chain attacks: audit and hardening guide after the Flippa backdoor incident
Thirty-one plugins closed after a Flippa buyer planted a backdoor in the first SVN commit. How to audit plugin ownership, detect compromise, and harden your sites against supply chain attacks.