A highly sophisticated supply chain attack has compromised the WordPress plugin Gravity Forms, allowing hackers to gain unauthorized access to millions of websites worldwide.