Blog

Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them.

Last week I wrote about catching a supply chain attack on a WordPress plugin called Widget Logic. A trusted name, acquired by a new owner, turned into something malicious. It…

How CaptainCore Drift Uncovered a Nulled Plugin Ring

I manage around 3,000 WordPress sites. Paid plugins often get stuck on old versions. Bad license keys, expired subscriptions, broken updaters. I wanted a way to see which plugins were…