Skip to content
The Nexus
SECURITYApr 29 · 22:13 UTCBLEEPING COMPUTERBill Toulas

Popular WordPress redirect plugin hid dormant backdoor for years

The Quick Page/Post Redirect WordPress plugin, used by over 70,000 sites, contained a hidden backdoor added five years ago that enabled attackers to inject arbitrary code into users' websites.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned
Quick Page/Post Redirect pluginorganizationWordPressorganizationbackdoortopicarbitrary code injectiontopic70,000 WordPress sitestopicfive yearstopic
Spot something wrong with this article?Report a problem →
Forward this