So, let’s talk about what happens when one of your installed WordPress plugins is compromised. The Social Warfare supply chain attackIn June 2024, it was discovered that a supply chain attack breached not one, but nine WordPress plugins. When and why WordPress plugins become a problem: The factsAccording to Patchstack’s State of WordPress Security in 2024, 97% of the WordPress software vulnerabilities they discovered were attributed to plugins. According to Patchstack:42% of WordPress sites in 2023 had at least one vulnerable piece of software installedSo, running outdated versions of WordPress plugins is a problem. What to do if one of your WordPress plugins is compromisedWordPress plugins are not the problem.