Security
Your WordPress Plugin Was Sold to a Stranger. The Backdoor Is Already Live.
A buyer paid six figures on Flippa, planted a dormant backdoor in 31 WordPress plugins, then activated it eight months later. 400,000 sites are still infected. Here’s how
May 5, 2026