WordPress Plugin Vulnerabilities

Multiple Plugins from itayamar - Supply Chain Compromise

Description

The plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup.

Proof of Concept

Affects Plugins

References

Miscellaneous

Original Researcher
Mike Gozdiskowski
Submitter
Mike Gozdiskowski
Verified
Yes

Timeline

Publicly Published
2025-07-23 (about 4 months ago)
Added
2025-07-23 (about 4 months ago)
Last Updated
2025-07-23 (about 4 months ago)

Other