First posted: 25 June 2024

We would like to inform you about several compromised WordPress plugins that could result in unauthorized access and potential data breaches on your website. If you are a maintainer of a WordPress website, please review the details below and take appropriate action if necessary.

Affected plugins

  • Social Warfare: Versions 4.4.6.4 – 4.4.7.1
  • Blaze Widget: Versions 2.2.5 – 2.5.2
  • Wrapper Link Element: Versions 1.0.2 – 1.0.3
  • Contact Form 7 Multi-Step Addon: Versions 1.0.4 – 1.0.5
  • Simply Show Hooks: Version 1.2.1

Further information about this WordPress plugin compromise