The developer website for the WordPress plugin Admin Menu Editor Pro was breached, leading to malicious updates being pushed to customers. The tampered plugin automatically creates hidden administrator accounts on targeted websites, creating a severe unauthorized access risk for system administrators.
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →