50K WordPress sites exposed to RCE attacks by critical bug in backup pluginA critical severity vulnerability in a WordPress plugin with more than 90,000 installs can let attackers gain remote code execution to fully compromise vulnerable websites. [...]
Source: 50K WordPress sites exposed to RCE attacks by critical bug in backup plugin (https://www.bleepingcomputer.com/news/security/50k-wordpress-sites-exposed-to-rce-attacks-by-critical-bug-in-backup-plugin/)