WordPress plugin update pulled from compromised adminmenueditor[.]com channel

Ibrahim Saud@tektrix

•updated Sep 16, 2026•0•0•1

Detects potential installation of compromised Admin Menu Editor Pro plugin updates by identifying sequential download events for specific plugin versions from the 'adminmenueditor.com' domain within a 24-hour window. This behavior is indicative of a supply chain attack where a legitimate update mechanism is leveraged to deliver malicious payloads without integrity verification.