Security vulnerabilities with critical risk ratings are present in widespread WordPress plugins. One is already being attacked.

Hackers are actively exploiting a maximum severity flaw in the Modular DS WordPress plugin that allows them to bypass authentication remotely and access the vulnerable sites with admin-level ...

Critical WordPress plugin flaw exposed some 40,000 users ...