Hackers Exploiting Unpatched WordPress Plugin Flaw to Create Secret Admin Accounts

stapp · Jul 2, 2023

As many as 200,000 WordPress websites are at risk of ongoing attacks exploiting a critical unpatched security vulnerability in the Ultimate Member plugin.
The flaw, tracked as CVE-2023-3460 (CVSS score: 9., impacts all versions of the Ultimate Member plugin, including the latest version (2.6.6) that was released on June 29, 2023.
Click to expand...

"This is a very serious issue: unauthenticated attackers may exploit this vulnerability to create new user accounts with administrative privileges, giving them the power to take complete control of affected sites," WordPress security firm WPScan said in an alert.
Click to expand...

https://thehackernews.com/2023/07/unpatched-wordpress-plugin-flaw-could.html

Log in or Sign up

Hackers Exploiting Unpatched WordPress Plugin Flaw to Create Secret Admin Accounts

stapp Global Moderator

Log in or Sign up

Hackers Exploiting Unpatched WordPress Plugin Flaw to Create Secret Admin Accounts

stapp Global Moderator

Useful Searches