More than 30 WordPress plugins in the EssentialPlugin package have been compromised with malicious code that allows unauthorized access to websites running them. [...]
WordPress plugin suite hacked to push malware to thousands of sites
Summary + source link. No paywalls, no tracking.