WP Tavern · 2026-06-03 · 39 min
Nathan Wrigley interviews Austin Ginder about recent WordPress plugin supply chain attacks. Austin explains how attackers are acquiring legitimate plugins, inserting malicious code or update mechanisms, and compromising thousands of sites. AI tools have enabled Austin to detect these issues and trace incidents across multiple plugins, prompting the creation of WP Beacon, a resource for tracking such attacks. The conversation gets into challenges of plugin security, the role of hosting companies, potential solutions, and the ongoing need for vigilant, community-driven oversight to counter bad actors in the WordPress ecosystem.
#223 - Ivana Ćirković on How WordPress Credits Bridges Education and Industry in the WordPress Ecosystem55 / 100
#222 - Destiny Kanno, Anand Upadhyay, Maciej Pilarski on How WordPress Education Programs Are Growing
#221 - Rahul Bansal on Using AI Everywhere at rtCamp
#220 - Cathy Mitchell on Why WordPress Events Matter: Community, Connection, and Giving Back
#218 - Luke Carbis on the Future of WordPress Plugins: AI, Ethics, and New Directory Standards