Active exploitation of bug in widely used WordPress plugin ongoing

Popular WordPress plugin Essential Addons for Elementor, which is used across one million sites, has been found to have an actively exploited critical unauthenticated privilege escalation vulnerability, tracked as CVE-2023-32243, with Wordfence noting that 200 attacks leveraging the flaw have been averted over a 24-hour period, The Hacker News reports.

actively exploited attacks bug critical cve escalation essential addons for elementor exploitation exploited flaw hacker period plugin popular privilege privilege escalation reports threat intelligence vulnerability vulnerability management wordfence wordpress wordpress plugin