Over the last weekend, as some of our members in the Post Status #club channel were noticing in real-time, WPML‘s website appeared to be hacked, and some of their customers were receiving disturbing emails. Someone claiming responsibility for the attack alleged an exploit in WPML’s plugin made it possible to compromise WPML’s site — and therefore any other site using their plugin. However, the official response on Twitter from WPML denied this and claimed a former employee was behind the attack. 🦹♂️
WPML has posted a full update on their blog, and they intend to pursue legal action. In the meantime, if you have a WPML account, you might want to change your password as soon as possible. 🔒