Ninja Forms and WPC Plugins Exploited to Hack WordPress Sites

Threat actors are actively exploiting stored cross-site scripting vulnerabilities within the Ninja Forms and WPC Product Bundles WordPress plugins. The attacks aim to deploy persistent backdoors and create unauthorized administrator accounts, granting full administrative access to compromised websites.