
- Experts find a way to trick Forminator into deleting a core WordPress file
- This process would trigger the site's setup, where hackers can take it over
- A patch is available, and users are advised to apply it
A popular WordPress plugin active on hundreds of thousands of websites was found to be carrying a high-severity vulnerability which could allow threat actors to fully take over compromised websites.