Trojanized Admin Menu Editor Pro Plugin Update (v2.35/2.36)

Ibrahim Saud@tektrix

•updated Sep 16, 2026•0•0•1

This rule detects file creation or modification events within the WordPress plugin directory for 'admin-menu-editor-pro'. Given that WordPress plugins are frequent targets for web shell placement, this rule monitors for unauthorized changes to the plugin's file structure, which may indicate an attempt to gain persistence or remote code execution on the web server.