writeups.xyz / WordPress Plugin Confusion: How an update can get you pwned

Submitter : c2a

Date: 25 November 2021

Bounty : undisclosed

Vulnerabilities :

• Supply Chain Attack
• WordPress Plugin Confusion
• WordPress Theme Confusion

Programs :

• Undisclosed

Authors :

• Kamil Vavra (@Vavkamil)
• Gal Nagli (@Naglinagli)

Link :
https://vavkamil.cz/2021/11/25/wordpress-plugin-confusion-update-can-get-you-pwned/