{"uuid": "5bc86887-94a5-4f76-8806-2b55f56b4d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3460", "type": "exploited", "source": "https://t.me/KomunitiSiber/434", "content": "Hackers Exploiting Unpatched WordPress Plugin Flaw to Create Secret Admin Accounts\nhttps://thehackernews.com/2023/07/unpatched-wordpress-plugin-flaw-could.html\n\nAs many as 200,000 WordPress websites are at risk of ongoing attacks exploiting a critical unpatched security vulnerability in the Ultimate Member plugin.\nThe flaw, tracked as CVE-2023-3460 (CVSS score: 9.8), impacts all versions of the Ultimate Member plugin, including the latest version (2.6.6) that was released on June 29, 2023.\nUltimate Member is a\u00a0popular plugin\u00a0that facilitates the", "creation_timestamp": "2023-07-01T10:08:32.000000Z"}