BdThemes supply chain attack poisons JSON feed to create rogue WordPress admins and deploy web shells without code changes.

BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.

Need to build a website with minimal cost and effort? The best website builders we've tested offer useful tools for quickly creating attractive, well-designed pages for blogs, online stores, and ...

Leeron is a New York-based writer who specializes in covering technology for small and mid-sized businesses. Her work has been featured in publications including Bankrate, Quartz, the Village Voice, ...