https://10alert.com/posts/hackers-exploit-wordpress-plugin-auth-bypass/
Critical WordPress Plugin Vulnerability Exploited Within Hours of Disclosure - Stay safe