"Massive WordPress Plugin Vulnerability Leads to 3,300 Site Infections"

Hackers are exploiting a vulnerability in outdated versions of the Popup Builder plugin for WordPress, infecting over 3,300 websites with malicious code. The attacks involve injecting code into the Custom JavaScript or Custom CSS sections of the WordPress admin interface, with the primary purpose of redirecting visitors to phishing pages and malware-dropping sites. Site admins are advised to upgrade to the latest version of the plugin, block specific domains associated with the attacks, and remove malicious entries to prevent reinfection.