Joost de Valk Exits Federated WordPress Repository Project

Effort to create an independent WordPress plugin and theme repository fails to gain support, prompting Joost de Valk to step ...
Bleeping Computer

Malware infiltrates Pidgin messenger’s official plugin repository

A red flag is that ss-otr only provided binaries for download and not any source code, but due to the lack of robust reviewing mechanisms in Pidgin's third-party plugin repository, nobody questioned ...
Searchenginejournal.com

Jetpack Boost – A Web Vitals WordPress Plugin

Automattic has pre-released a plugin designed to tackle the hard work of achieving better Core Web Vitals scores. The plugin is currently in testing phase and not meant to be used on live production ...
Bleeping Computer

Backdoor Found in WordPress Plugin With More Than 200,000 Installations

For the past two and a half months, a WordPress plugin named Display Widgets has been used to install a backdoor on WordPress sites across the Internet. The backdoor code was found between Display ...
TechRadar

Another major WordPress plugin has been hacked to try and hijack your sites

Researchers from WPScan find flaw in Hunk Companion, a plugin with roughly 10,000 users The flaw allows crooks to install other plugins from the WP repository, including those with known RCE flaws ...