Three popular plugins served malicious JavaScript through a compromised CDN.
A popular WordPress plugin is once again being leveraged in website takeover attacks.