When patched last week, the bug affected at least 1 million websites. Zero-day exploits were going on then. Active exploits are targeting a recently patched flaw in the popular WordPress plugin ...

Attackers are scanning for WordPress sites running a vulnerable version of a popular plugin that may allow them to take over sites and servers. The vulnerability affects "Duplicator," a WordPress ...