BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.
Millions of people rely on a network of unpaid volunteers to stay anonymous online, and for 25 years that network has run on ...