THREATOPS

THREAT OPS › Threat News › BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

medthehackernewsPublished 2026-08-11

Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform's plugins team to temporarily disable their downloads.

"Unlike traditional software supply chain attacks, zero source code files were modified within the official WordPress.org repository," Wordfence researcher Paolo Tresso said.

MITRE ATT&CK techniques

Supply Chain CompromiseT1195

Indicators of compromise

wordpress.orgdomain

Original source: https://thehackernews.com/2026/08/bdthemes-supply-chain-attack-poisons.html

Same event, other sources

BdThemes plugins supply-chain hack creates rogue WordPress adminsbleepingcomputer · 2026-08-10