A dangerous WordPress plugin bug is being actively exploited

This critical WordPress vulnerability lets attackers create hidden admin accounts and silently hijack entire websites without triggering security alerts