Flaw in defunct WordPress plugin exploited to create backdoor

A vulnerability in the defunct OneTone WordPress theme plugin is being exploited to compromise entire sites while installing backdoor admin accounts.

Read more: Flaw in defunct WordPress plugin exploited to create backdoor

Story added 29. April 2020, content source with full text you can find at link above.