Filtered by category: WordFence, tag: supply chain attack × Clear
PSA: Supply Chain Compromise in BdThemes Ecosystem via Poisoned API Response
Matched: WordPress
A supply chain compromise was discovered in the BdThemes WordPress plugin ecosystem, reported to Wordfence on August 7, 2026. The attack involved a poisoned API response affecting multiple plugins from the vendor. All affected plugins have been temporarily closed in the official WordPress plugins directory while the WordPress Plugins team conducts a full inspection and ongoing investigation.