Reported by 1 outlet
OptinMonster CDN Supply-Chain Attack Compromises 1.2 Million WordPress Sites
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.80 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
OptinMonster CDN Supply-Chain Attack Compromises 1.2 Million WordPress Sites
bleepingcomputer.com · 120d ago · June 16th, 2026
Awesome Motive's CDN was breached in a supply-chain attack affecting OptinMonster (1.2M sites), TrustPulse, and PushEngage. Attackers exploited a known UpdraftPlus vulnerability to access a marketing server containing CDN credentials, then modified JS files served from the CDN to collect admin authentication tokens and create rogue administrator accounts. The backdoor plugin (disguised as "Content Delivery Helper" or "Database Optimizer") included a web shell and arbitrary PHP execution, granting full site control. The attack window was short (OptinMonster: 25 minutes; PushEngage: ~21 hours), but compromised sites remain backdoored unless manually cleaned.