Attackers can bypass WordPress authentication, run commands as an administrator, and then install malicious plugins on ...
A vulnerability in the popular Ultimate Member WordPress plugin enables account takeover by exposing password reset links.