[ad_1]
Researchers have aided update a high-severity security flaw in a popular WordPress plugin, which may be exploited to completely wipe and reset any vulnerable WordPress website.
The vulnerability is located in the Hashthemes Demo Importer plugins, which claim more than 8,000 active installations and is meant to allow administrators to import demos for WordPress themes with a single click.
The vulnerability allows any authenticated intruder, even a subscriber-level user with minimal capabilities, to reset WordPress sites by deleting virtually all of the databases and uploading a…
More Info