Authentication Bypass in User Profile Builder Plugin Threatens 40,000 WordPress Sites
A high-severity authentication bypass in the User Profile Builder plugin allows unauthenticated attackers to log in as user ID 1 on WordPress sites where automatic login is enabled.