Hackers launch mass attacks exploiting outdated WordPress plugins

**Mass exploitation of outdated WordPress plugins:** A large-scale campaign is actively exploiting critical RCE-enabling flaws in the GutenKit and Hunk Companion plugins (CVSS 9.8) to install malicious plugins and backdoors; Wordfence observed 8.7 million blocked attempts in two days and researchers identified malicious .zip payloads and IOCs (REST endpoints and directories) to detect compromise—administrators are advised to patch/upgrade affected plugins and inspect logs and filesystem paths.