Threat Intelligence: WordPress Zero-day

A zero-day in the WP GDPR Compliance WordPress plugin (affecting versions 1.4.2 and older) is being actively exploited to force changes to plugin/CMS settings, enable public registration, create administrative accounts (e.g., "t2trollherten"), enqueue malicious WP-Cron tasks, and install backdoors (notably files named "wp-cache.php" or "wp-cahe.php"). The plugin was removed and later updated to v1.4.3 to patch the issue; site owners should update immediately and inspect for indicators of compromise.