A backdoor has been discovered in over 30 wordpress plugins, which are used across thousands of websites. The malicious code was apparently added after an ownership change, potentially putting many sites at risk. The exact scope and impact of the vulnerability are not clear, as some reports focus on the wordpress plugin issue while others appear unrelated.