Security
ShapedPlugin supply-chain breach infects WordPress plugins
ShapedPlugin's build system was breached in late May 2026, allowing attackers to push malicious updates for three premium plugins. The malware stole credentials, installed hidden backdoors, and exfiltrated WooCommerce order data from infected sites.