BdThemes

Reported Context (2)

Cybersecurity researchers uncovered a supply chain compromise at BdThemes that poisoned remote JSON data used by several WordPress plugins, leading WordPress to temporarily disable downloads pending review. Wordfence Details BdThemes Supply-Chain Attack Using Poisoned JSON
A threat actor compromised BdThemes’ upstream infrastructure and poisoned a remote JSON feed, using the attack to create rogue administrator accounts on WordPress sites. BdThemes Supply-Chain Compromise Creates Rogue WordPress Admins

CVE (2)

People (1)

MITRE ATT&CK (9)

Products (14)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.