The popular WordPress plugin Gravity Forms has been compromised in what seems a supply-chain attack where manual installers from the official website were infected with a backdoor.

Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack Malicious updates available from WordPress.org create attacker-controlled admin account.