Single File Reveals 13-Year WordPress Plugin Backdoor Network

This investigation exposed a sophisticated supply-chain attack where a single operator used fake WordPress plugins to install backdoors on thousands of sites over 13 years. The discovery highlights critical vulnerabilities in the plugin review ecosystem and demonstrates how attackers can conduct large-scale infrastructure compromise with minimal detection.