According to the researchers, threat actors could have accessed the website’s backend with this information and made unauthorized changes to its content. Additionally, by analyzing the source code and finding other vulnerabilities to sell or exploit, they could have caused further damage. A 2019 server backup contained “at least five” vulnerable plugins that were installed on the website at the time, the researchers found.
