A popular WordPress plugin with more than 300,000 installs carried two high-severity vulnerabilities that could allow threat actors to completely take over the websites, experts have warned.
Cybersecurity researchers from Wordfence discovered the flaw in early December last year, and reported it to the developers.
