'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

Attackers are exploiting two newly disclosed vulnerabilities in WordPress to compromise millions of sites. This matters because it's a large attack surface. Users should update their WordPress installations as soon as possible to prevent exploitation.