1.
2.
WordPress plugin suite hacked to push malware to thousands of sites
(bleepingcomputer.com)
3.
Someone bought 30 WordPress plugins and planted a backdoor in all of them
(news.ycombinator.com)