The issue enables attackers to exploit a flaw in the Ultimate Member plugin that allows the creation of rogue admin accounts. Cybersecurity researchers have discovered ongoing attacks targeting a critical vulnerability in the widely used Ultimate Member plugin for WordPress websites.

Source: HackRead