Trojanized Admin Menu Editor Pro plugin install (v2.35/2.36)

Ibrahim Saud@tektrix

•updated Sep 16, 2026•1•0•2

This rule monitors for file creation or modification events related to the Admin Menu Editor Pro WordPress plugin, specifically looking for indicators of specific versions (2.35, 2.36) or file naming conventions. It also alerts on network communication to the plugin's domain, which could indicate a compromise or the use of an unauthorized or modified plugin version that may be associated with known vulnerabilities.