Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability

Web: https://thehackernews.com/2022/09/over-280000-wordpress-sites-attacked.html

A zero-day flaw in the latest version of a WordPress premium plugin known as WPGateway is being actively exploited in the wild, potentially allowing malicious actors to completely take over affected sites.
Tracked as CVE-2022-3180 (CVSS score: 9.8), the issue is being weaponized to add a malicious administrator user to sites running the WPGateway plugin, WordPress security company Wordfence

plugin vulnerability wordpress zero-day zero-day vulnerability