BdThemes Supply-Chain Attack Turns WordPress Admin Banners Into Backdoors

A poisoned BdThemes API response reportedly used WordPress admin sessions to create rogue administrators, putting plugin dashboard supply chains on the hosting security checklist.