Hackers are actively exploiting a Zero-Day in WordPress ThemeREX Plugin to create Admin Accounts
Security Affairs
FEBRUARY 19, 2020
A new flaw was discovered in a WordPress plugin, this time experts found a zero-day vulnerability in the ThemeREX Addons to create admin accounts. Security experts from WordFence have discovered a zero-day vulnerability in the ThemeREX Addons that was actively exploited by hackers in the wild to create user accounts with admin permissions.
Let's personalize your content