Supply‑chain breach of OptinMonster injects admin backdoors into 1.2 M WordPress sites
Sansec uncovered a supply‑chain attack that hijacked the CDN of Awesome Motive's OptinMonster, TrustPulse and PushEngage plugins, injecting malicious JavaScript that creates hidden admin accounts on 1.2 million WordPress sites. The backdoor activates only for logged‑in admins, giving attackers full control and exposing the broader plugin ecosystem.