Supply Chain Attack on BdThemes Creates Rogue WordPress Admins
A supply chain attack on BdThemes compromised JSON configuration files, allowing attackers to inject malicious code into WordPress sites. This code creates unauthorized administrator accounts, giving attackers full control over affected websites. Site owners using BdThemes products should audit their installations immediately.