Malware Found in Popular WordPress Plugin: Quick Page/Post Redirect
A serious security issue has been uncovered in the Quick Page/Post Redirect plugin, used by over 70,000 WordPress sites. This plugin, which allows users to create redirects, had a hidden backdoor added five years ago, enabling hackers to inject malicious code into affected sites.
The malware was discovered by Austin Ginder, who detected anomalies in several sites he manages. While it remains unclear whether the plugin’s author was compromised or acted maliciously, the backdoor allowed for unauthorized updates and could have been leveraged for SEO spam operations.
WordPress.org has temporarily removed the plugin, but users are at risk until they uninstall it and replace it with the upcoming secure version.
Risk Level: High
To protect yourself, ensure you remove this plugin immediately and monitor your site for unusual activity.
Source: View Original Report
