A supply chain attack has compromised wordpress sites, with thousands reportedly affected. The attack is believed to have involved the compromise of certain plugins, though the exact number of sites at risk is unclear, with estimates ranging widely. The scope and details of the attack, including the specific plugins and methods used, are still emerging.