HACKERS TRY TO EXPLOIT CRITICAL VULNERABILITY IN WORDPRESS PLUGIN

Summary from the TLDR InfoSec newsletter

A 9.9 severity vulnerability in the WordPress Automatic plugin was disclosed in March. The vulnerability is a SQL injection that could allow unauthenticated attackers to create admin accounts and take over a WordPress site. WPScan has logged more than 5 million attempts to exploit the vulnerability since disclosure.