WordPress plugin with over a million installs may have a worrying security flaw – here’s what we know

A critical WordPress plugin flaw allows threat actors to run arbitrary PHP commands, potentially taking over entire websites.