Check Point: ~2000 Hacked WordPress Sites Spread Malware, Ransomware

The notable shift here is that compromised WordPress sites are functioning less as a nuisance and more as a delivery pipeline for ransomware, which raises the stakes for anyone running unpatched plugins or themes. The affected parties span site owners and their visitors, so the exposure is not confined to the breached party. Whether this reflects a broader trend of repurposing common web vulnerabilities for higher-severity payloads is the open question worth tracking.