Home OSINT News Signals
CYBER

WordPress membership plugin bug exploited to create admin accounts

🕓 1 min read

EXCLUSIVE: CRITICAL WORDPRESS PLUGIN HACKED — 60,000+ SITES INFILTRATED, YOUR DATA EXPOSED

The digital front lines have been BREACHED in a massive, ongoing cyber assault targeting the very backbone of the internet. Fox News has learned that a critical vulnerability in a popular WordPress plugin is being actively weaponized by hackers right now, putting tens of thousands of websites and your personal information in the crosshairs. This is not a drill; this is a live data breach in progress.

The target is the User Registration & Membership plugin, a tool installed on over 60,000 sites. Cybercriminals have discovered a devastating zero-day exploit, allowing them to create full administrator accounts with a few lines of code. Once inside, they own the site. They can install malware, launch ransomware attacks, and steal every piece of user data on the server—from emails to payment details. This is a skeleton key to the digital kingdom, and the bad guys have it.

Senior cybersecurity analysts tell Fox News this is a "category-five cyber hurricane." One insider warned, "The scale is unprecedented. We are tracking automated attacks creating backdoor admin accounts faster than site owners can respond. This plugin's vulnerability is a gift to state-sponsored hackers and criminal syndicates alike." The silence from some mainstream tech outlets is deafening. Why aren't they sounding the alarm?

If you have an account on any membership site, forum, or online store built with WordPress, your login credentials, private messages, and financial data could be hanging in the balance. This exploit is a phishing paradise, enabling criminals to send legitimate-looking emails from YOUR trusted sites. Your digital identity is under siege.

We predict a wave of ransomware demands and mass data dumps will hit the dark web within 72 hours as these hackers cash in. Website owners who delay patching for even a few hours are playing Russian roulette with their users' security.

The internet is only as strong as its weakest plugin, and tonight, a critical pillar has cracked.

Telegram X LinkedIn
Back to News