SECOND OTTOKIT VULNERABILITY EXPLOITED TO HACK WORDPRESS SITES

Summary from the TLDR InfoSec newsletter

Threat actors have been observed exploiting a new vulnerability in the OttoKit WordPress plugin. The vulnerability could allow unauthenticated attackers to connect to impacted sites that have never enabled or used an application password due to a lack of proper authentication checks in the create_wp_connection() function. Attackers have been observed attempting to exploit the vulnerability to create an admin user account through the automation/action endpoint.