Threat actors are launching a hacking campaign aimed at taking over tens of thousands of WordPress sites by exploiting critical vulnerabilities. One of the issues exploited in the attacks is a zero-day vulnerability that affects several plugins and that could allow hackers to create admin accounts and take over the sites. Three other plugins were targeted by hackers in the past hours. The development teams behind the Async JavaScript and 10Web Map Builder for Google Maps have already issued security updates to address the flaws. A few days ago experts warned of a new wave of attacks targeting a vulnerability in the popular Duplicator plugin.”]
Source: https://securityaffairs.co/wordpress/98685/hacking/wordpress-sites-plugins-hacking.html