WordPress Plugin Qualified Electronic Signatures by eID Easy Supply Chain Attack Polyfill.io - Vulnerability Database

WordPress Plugin Qualified Electronic Signatures by eID Easy Supply Chain Attack Polyfill.io

Critical
Reference: No Reference
Title: WordPress Plugin Qualified Electronic Signatures by eID Easy Supply Chain Attack Polyfill.io
Overview:

WordPress Plugin Qualified Electronic Signatures by eID Easy is prone to a supply chain attack because of the Polyfill JavaScript library used. The ownership of the library was taken over by malicious threat actors that used the service to redirect victims to malicious websites. WordPress Plugin Qualified Electronic Signatures by eID Easy version 3.3.0 is affected prior versions may also be affected.