ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack
Attackers backdoored ShapedPlugin Pro updates, stealing credentials, 2FA codes, wp-config.php data, and WooCommerce order details.
More info