3 ms·
So isn't the reasonable deduction here that the vendor was responsible for this given it was present on their website but not on the plugins through Wordpress?
by hanniabu 5y ago
So isn't the reasonable deduction here that the vendor was responsible for this given it was present on their website but not on the plugins through Wordpress? They probably didn't have the back door on the wordpress plugins because those would face a higher scrutiny than the ones on their site. Finally they get caught and go silent, but then when wordpress knows they finally respond because they know the jig is up and are trying to save face.
- dannyw 5y agoI don't think that's a reasonable deduction, it seems like the contact form on the vendor's website didn't work. That could possibly be compromised by the attacker.
- ehnto 5y agoI think the more reasonable deduction is that the vendor's website was compromised, and that's where the attacker was able to introduce new files.