WordPress Plug-In Bugs Put 1 Million-Plus Sites At Risk

[Cerberus]

Exploitation May Have Exposed REST-API Endpoints on Sites, Researchers Say
OptinMonster, a WordPress plug-in used in more than 1 million websites for sales campaign creation, was vulnerable to high-severity bugs, according to Wordfence researchers. An updated version of the plug-in has patched the flaws.

https://www.inforisktoday.co.uk/wordpress-plug-in-bugs-put-1-million-plus-sites-at-risk-a-17822