securityBACKGROUND
OptinMonster WordPress plugin hacked in CDN supply-chain attack
BACKGROUND
1 SIGNALFIRST DETECTED 15 June 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
15 Jun
OptinMonster WordPress plugin hacked in CDN supply-chain attack
REPORT · WHAT · BleepingComputer
Other feeds and industry voices
15 Jun
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites
An attacker tampered with trusted JavaScript files used by WordPress sites running PushEngage, OptinMonster, and TrustPulse, turning those files into a way to break into the
REPORT · WHEN · The Hacker NewsOPEN STORY
18 Jun
ShapedPlugin update flow hacked to infect WordPress sites
Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected releases to paying customers via the vendor's official update
REPORT · HOW · BleepingComputerOPEN STORY
10 Aug
BdThemes plugins supply-chain hack creates rogue WordPress admins
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators'
REPORT · WHAT · BleepingComputerOPEN STORY
Sources
BleepingComputer
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →