Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

As cited

Copy frozen at 2026-09-15 22:32 UTC (site build).

breaches incidents

Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

A threat actor compromised the Admin Menu Editor Pro plugin maintainer's website and distributed malicious updates to over 200 customers, injecting code that created hidden user accounts for unauthorized access. The backdoored plugin affected approximately 1,500 WordPress installations across these customers' deployments.

Why it matters: WordPress site administrators using Admin Menu Editor Pro should immediately verify installations for hidden accounts and audit access logs, as attackers gained persistent footholds through a trusted plugin update channel.

Source published

2026-09-15 20:34 UTC

First seen by Cybersecurity Tracker

2026-09-15 21:26 UTC