Wordfence Finds Critical Backdoor in ARVE WordPress Plugin

Read post on hackread.com

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.