A critical OttoKit plugin flaw CVE-2025-3102 exploited within hours lets attackers create admin accounts unchecked.

Discussing how the sites might have been infected, the researchers said there were multiple ways to compromise a WordPress site. That includes exploiting a vulnerable plugin or a theme, compromised ...

According to PatchStack, who discovered the flaw, exploitation began just four hours after the vulnerability was patched. The ...

Both flaws allow malicious actors to elevate their privileges to admin, gaining full control of the WordPress site, and ...