Threat Post - Sprawling Active Attack Aims to Take Over 1.6M WordPress Sites

Cyberattackers are targeting security vulnerabilities in four plugins plus Epsilon themes, to assign themselves administrative accounts.

from Threatpost https://threatpost.com/active-attack-takeover-wordpress/176933/