WordPress vulnerability exploited to create admin accounts during updates

Active attacks are targeting WordPress sites via a vulnerability triggered during the update process. Threat actors exploit this mechanism to grant themselves administrative privileges and create unauthorized accounts. Administrators are strongly advised to audit plugins and themes for malicious modifications immediately.