Malicious updates available from WordPress.org create attacker-controlled admin account.
Originally appeared here:
Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack
Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack
