Attackers can bypass WordPress authentication, run commands as an administrator, and then install malicious plugins on ...
Security researcher at Automattic discovered a vulnerability affecting popular WordPress backup plugin, UpdraftPlus. The vulnerability allowed hackers to download user names and hashed passwords.