A critical flaw in a WordPress add-on was recently patched, which allows crooks to add a rogue admin account to the site.
Attackers are exploiting a critical-severity privilege escalation vulnerability (CVE-2025-8489) in the King Addons for ...