The plugin you trust to protect your site can itself become the attack vector. Backuply, installed on over 600,000 WordPress sites, contained a Path Traversal flaw (CVE-2025-2877) that let a basic subscriber account gain full admin access. That is a serious supply chain concern worth understanding. #WordPress #WordPressSecurity #SecurityHardening #WebSecurity https://wpguy.uk/blog/backuply-vulnerability-how-subscribers-gain-admin-access/