Hackers exploit a critical WordPress plugin flaw that allows creation of administrator accounts without authentication.

A popular WP plugin can be abused to take over websites and thousands of sites are vulnerable.

Critical vulnerability affecting a WordPress user registration and membership plugin enables attackers to take full control of a website.

Attention, WordPress users: If you have a WordPress username set to "admin," change it immediately. That warning was issued Friday by WordPress founder Matt Mullenweg, in the wake of reports that ...

Hackers are exploiting a critical vulnerability in the User Registration & Membership plugin, which is installed on more than ...