Various Plugins - Injected Backdoor

Description

Several plugins hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A malicious threat actor compromised their source code and injected code that exfiltrates database credentials and is used to create new, malicious, administrator users and send that data back to a server.