News

This Premium WordPress plugin and theme have been compromised – here's how to check your website hasn't been infected

  • Sead Fadilpašić--TechRadar
  • published date: 2026-03-24 12:00:00 UTC

BuddyBoss had its update server compromised and used to push a poisoned update.

<ul><li>Ongoing cyberattack compromises BuddyBoss update system </li><li>Malicious updates steal admin credentials, Stripe keys, and databases</li><li>Hundreds of sites already hit; thousands more at… [+2653 chars]