Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
WordPress Plugin Backdoor Sends Site and Administrator Details to Attacker C2
A critical supply chain backdoor in the Advanced Responsive Video Embedder WordPress plugin, which can give unauthenticated attackers complete administrator access. The malicious version, 10.8.7, affects a plugin with roughly 20,000 active installations and is tracked as CVE-2026-18072, with a CVSS score of 9.8. The issue was detected by Wordfence PRISM, the company’s autonomous AI […] The post WordPress Plugin Backdoor Sends Site and Administrator Details to Attacker C2 appeared first on Cyber Security News.
A critical supply chain backdoor in the Advanced Responsive Video Embedder WordPress plugin, which can give unauthenticated attackers complete administrator access. The malicious version, 10.8.7, affects a plugin with roughly 20,000 active installations and is tracked as CVE-2026-18072, with a CVSS score of 9.8. The issue…
Excerpt shown under the publisher's RSS terms · 46 words · full text and figures are on the publisher's site
Related coverage
WordPress Malware Uses Hidden Plugin and Blockchain C2 to Stay Undetected
Cybersecurity News · Sep 23, 2026
WordPress Malware Comes Back After Removal Using a Self-Healing Backdoor
Cybersecurity News · Oct 1, 2026
Hackers Exploit WooCommerce Plugin Bug to Take Over WordPress Sites Without Login
Cybersecurity News · Sep 15, 2026
OptinMonster Plugin Hack Exposes 1.2 Million WordPress Sites to Cyberattack
Cybersecurity News · Jun 16, 2026