ShapedPlugin update flow hacked to infect WordPress sites
Thu Jun 18 2026
Malware
Vulnerability
www.bleepingcomputer.com
Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected releases to paying customers via the vendor's official update system. [...]