Securing WordPress: Fighting against vendor attacks and protecting against compromise

Recently, there have been attacks on WordPress plugins right at the source using credentials exposed in previous data breaches. Hackers look for compromised credentials of plugin authors who use the same passwords on different websites. This prompted the WordPress company to fight this problem.

WordPress has announced that they are suspending plugin updates and initiating a forced password reset of plugin authors to prevent further compromise of websites due to ongoing attacks on WordPress plugin vendors.

🚀 WordPress has taken a number of measures to counter these attacks. They introduced forced password resets and encouraged plugin authors to use two-factor authentication. They also temporarily blocked all new plugin updates at source unless they got approval from the team to make sure the plugin wasn't updated with malicious backdoors.

• 📌 WordPress ensures security by forcing password resets and encouraging the use of two-factor authentication.
• 📌 New plugin updates are temporarily blocked until they receive approval from the team.
• 📌 Hackers use credentials exposed in data leaks to attack WordPress plugins.