0
Deep & Emerging Tech·April 15, 2026·1 min read

WordPress websites under attack — expert report says dozens of plugins hijacked to target thousands of sites

Share

An attacker buying a struggling plugin shop just to ship malware is the new supply-chain risk for the long tail of SaaS and CMS ecosystems. If you're running WordPress or similar, vendor due diligence now includes cap table and ownership changes—not just CVEs.