WordPress membership plugin bug exploited to create admin accounts

Published on March 5, 2026

Hackers are exploiting a critical vulnerability in the User Registration & Membership plugin, which is installed on more than 60,000 WordPress sites. [...]