A popular WP plugin can be abused to take over websites and thousands of sites are vulnerable.
An advisory has been published about a critical vulnerability discovered in the User Registration & Membership plugin for WordPress, installed on more than 60,000 websites. The vulnerability is rated ...
Hackers exploit a critical WordPress plugin flaw that allows creation of administrator accounts without authentication.