FOUND: Wordpress users beware this popular plugin has been hijacked to push potential malware - What They Never Told You

• The RocketGenius website served a malicious variant of the Gravity Forms WordPress add-on for a few hours
• The variant harvested extensive information and allowed for RCE
• The malware affected only manual downloads and composer installations

Gravity Forms, a popular WordPress add-on with at least a million users, was victim of a supply chain attack in which threat actors tried to deploy malware to its users and take over their websites.