Hackers Exploit Recently Patched WordPress Bugs, Putting Millions of Sites at Risk

Two critical security vulnerabilities in WordPress’s core software have given hackers the ability to remotely take over tens of millions of websites, according to a recent estimate by a cybersecurity researcher. The flaws, which were patched in the latest update, are now being actively exploited in the wild. Website owners who have not yet applied the security update are urged to do so immediately to prevent unauthorized access, data theft, and potential defacement. The vulnerabilities allow attackers to execute arbitrary code and gain full administrative control over affected sites. This incident highlights the importance of timely patch management and continuous monitoring for web-based platforms.