Attackers exploit critical WordPress vulnerability at scale

Hackers are actively exploiting a critical WordPress vulnerability, with dozens of proof-of-concept exploits now public. The flaw allows attackers to create mischief including site defacement and malware injection. WordPress has not yet released a patch, leaving millions of sites exposed.