Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Critical WordPress Plugin Backdoor Exposes 20,000 Sites to Administrator Takeover
Excerpt
A critical supply chain attack targeting the WordPress ecosystem has exposed approximately 20,000 websites to full administrative compromise after a widely used plugin was found to contain a deliberately injected backdoor. Chloe Chamberland at Wordfence disclosed that the vulnerability, tracked as CVE-2026-18072 with a CVSS score of 9.8, affects version 10.8.7 of the Advanced Responsive Video Embedder plugin. Wordfence’s AI-driven threat intelligence platform, PRISM,…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-18072 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…