Back Securityaffairs.Co

Supply Chain Attack Hits Popular WordPress Plugins Through Awesome Motive CDN

Securityaffairs.Co •Pierluigi Paganini • June 15, 2026

Attackers compromised Awesome Motive CDN files, backdooring WordPress sites running OptinMonster, TrustPulse, and PushEngage. Sansec researchers discovered an active supply chain attack hitting WordPress sites running OptinMonster, TrustPulse, and PushEngage, three plugins operated by Awesome Motive, one of the largest WordPress plugin companies in the world. The malicious JavaScript wasn’t sitting on any victim’s server. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Supply Chain Attack Compromises Popular WordPress Plugins Affecting 1.2 Million Sites A supply chain attack has compromised the OptinMonster, TrustPulse, and PushEngage WordPress plugins, impacting over 1.2 million sites. Attackers exploited a known vulnerability in the UpdraftPlus plugin to gain access to Awesome Motive's CDN, allowing them to serve malicious JavaScript directly to customer sites. The malware activates when a logged-in administrator visits an infected site, creating a rogue admin account and installing a hidden backdoor plugin. This backdoor can execute arbitrary PHP code and communicate with a lookalike domain of Tidio. The attack was discovered by Sansec and occurred on June 12, 2026. Awesome Motive has since remediated the issue and rotated all credentials, but affected site owners are advised to treat their sites as compromised. 11 sources 73

Extracted Entities

Supply Chain Attack Hits Popular WordPress Plugins Through Awesome Motive CDN

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)