WordPress membership plugin bug exploited to create admin accounts

Read post on bleepingcomputer.com

Hackers are exploiting a critical vulnerability in the User Registration & Membership plugin, which is installed on more than 60,000 WordPress sites. [...]