Wordfence

Company

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

November 4, 2025

Last Seen

August 10, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (4)

Critical Vulnerabilities in Avada Builder Plugin Expose WordPress Sites to Credential Theft

May 15·4 sources

BdThemes WordPress Plugins Compromised in Supply Chain Attack

Aug 10·5 sources

Vulnerability in Post SMTP Plugin Allows Account Takeover on 400K WordPress Sites

Nov 5·3 sources

Vulnerability in Post SMTP Plugin Allows WordPress Account Takeover

Nov 5·4 sources

Related Articles (3)

BdThemes plugins supply

Bleepingcomputer·Aug 10

Avada Builder WordPress plugin flaws allow site credential theft

Bleepingcomputer·May 15

Hackers exploit WordPress plugin Post SMTP to hijack admin accounts

Bleepingcomputer·Nov 4

Related Entities

Data Breach Supply Chain Attack Sql Injection Avada BdThemes CVE-2026-4798 CWE-200 - Exposure of Sensitive Information Cwe-79 - Cross-site Scripting (xss)Cwe-89 - SQL Injection T1071 - Application Layer Protocol T1078 - Valid Accounts T1190 - Exploit Public-Facing Application