Thirty Plugins, One Backdoor: The Essential Plugins Supply Chain Attack
On April 5 and 6, 2026, thousands of WordPress sites running plugins from a single small author began serving SEO spam exclusively to Googlebot. The spam was invisible to site owners, invisible to sit...