👓 Zero-day in popular WordPress plugin exploited in the wild to take over sites | ZDNet

Read Zero-day in popular WordPress plugin exploited in the wild to take over sites by Catalin Cimpanu (ZDNet)
Attacks started around three weeks ago and are still going on. Users should update the WP GDPR Compliance plugin to version 1.4.3 to protect their sites.