Jun 232026 ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack Attackers backdoored ShapedPlugin Pro updates, stealing credentials, 2FA codes, wp-config.php data, and WooCommerce order details.