WordPress site compromise

Attacks that inject attacker-controlled code into WordPress installations, commonly through vulnerable plugins or weak administrator credentials, in order to serve malware or lures to the site's visitors.