BdThemes plugins supply-chain hack creates rogue WordPress admins

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts. The supply-chain hack allowed attackers to gain unauthorized access to WordPress sites, posing a significant security risk to users of the affected plugins.