<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>WordPress on ap7i.com</title>
    <link>https://ap7i.com/tags/wordpress/</link>
    <description>Recent content in WordPress on ap7i.com</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Thu, 16 Apr 2026 11:24:17 -0400</lastBuildDate>
    <atom:link href="https://ap7i.com/tags/wordpress/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Two Supply Chain Attacks Hit WordPress in One Week</title>
      <link>https://ap7i.com/posts/wordpress-supply-chain-attacks-april-2026/</link>
      <pubDate>Thu, 16 Apr 2026 11:24:17 -0400</pubDate>
      <guid>https://ap7i.com/posts/wordpress-supply-chain-attacks-april-2026/</guid>
      <description>Between April 5 and April 7, two unrelated supply chain attacks compromised WordPress sites through the one channel admins are trained to trust: plugin updates. One hijacked Nextend&amp;rsquo;s update servers to push a weaponized Smart Slider 3 Pro build to 800,000+ installations. The other activated dormant backdoors in 30+ plugins an attacker had quietly purchased on Flippa a year earlier.</description>
    </item>
  </channel>
</rss>
