Wordfence Finds Critical Backdoor in ARVE WordPress Plugin
Fri Jul 31 2026
Malware
Vulnerability
hackread.com
A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.