Hackers are targeting a WordPress security flaw that was supposed to have been fixed

Wordpress brand logo on computer screen. Man typing on the keyboard.

Researchers recently observed a known, and apparently fixed vulnerability, being abused in the wild to steal login credentials for WordPress websites.

Cybersecurity researchers from Plugin Vulnerabilities, an organization that monitors flaws in WordPress plugins, reported a hacker trying to exploit an arbitrary file viewing vulnerability in the WP Compress plugin.