Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform’s plugins team to temporarily disable their downloads.
« Unlike traditional software supply chain attacks, zero source code files were modified within the official WordPress.org repository, » Wordfence researcher Paolo Tresso said.