[sunjester]

A very popular WordPress plugin was hacked over the weekend after a hacker defaced its website and sent a mass message to all its customers revealing the existence of supposed unpatched security holes. In a follow-up mass email, the plugin's developers blamed the hack on a former employee, who also defaced their website.

https://wpml.org/2019/01/wpml-org-site-b...e-weekend/
https://www.bleepingcomputer.com/news/se...ams-users/
https://www.zdnet.com/article/popular-wo...-employee/
https://wptavern.com/wpml-website-hacked...ompromised