Critical WordPress Vulnerability Exposes 4 Million Sites to Attack

Skip to content

WordPress has found itself at the center of another security issue. A widely-used plug-in is vulnerable, potentially allowing attackers to take over an entire website.

Critical Vulnerability Detected

More than 4 million sites are using a WordPress plug-in called Really Simple Security. This plug-in had a flaw that left sites open to an administrative takeover. A report from Wordfence alerted users about this issue.

What Happened?

The flaw allows hackers to bypass two-factor authentication (2FA). This is a big deal because it lets them remotely gain access to any account on a site, even those