HACKERS EXPLOIT AUTH BYPASS IN SERVICE FINDER WORDPRESS THEME

Summary from the TLDR InfoSec newsletter

WordPress security firm, Wordfence, is warning users of the Service Finder premium WordPress theme of a critical (CVSS 9.8/10) vulnerability. The vulnerability is an authentication bypass vulnerability that allows attackers to bypass authentication and log in as administrators. Although a patch was released in July, Wordfence is reporting a sharp uptick in exploitation starting in September.