Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them

On April 7, 2026, the WordPress.org Plugins Team permanently closed every plugin from the Essential Plugin author. At least 30 plugins, all on the same day.