Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

Malware-laced versions of the WordPress Admin Menu Editor Pro plugin were distributed to over 200 customers after a threat actor compromised the maintainer's websitecasual. The updates created a hidden user account, backdooring approximately 1,500 sites. The scope of the breach and affected users were disclosed; the plugin's maintainer is investigating.