WPTips - The WordPress ecosystem, daily.
A CDN supply-chain attack on Awesome Motive's infrastructure tampered with JavaScript files served by OptinMonster, TrustPulse, and PushEngage — creating rogue admin accounts and installing a self-hiding backdoor on affected sites. Wordfence's free tier is reported not to have flagged the intrusion.