Dozens of WordPress plug-ins were allegedly hijacked to push malware after they were sold to a new corporate owner.
Security researchers have uncovered a new coordinated campaign which uses malicious extensions to steal user data and hijack browsing sessions.