WordPress attackers exploit wp2shell flaws in widespread campaign

Attackers are exploiting two WordPress flaws chained as wp2shell to gain remote code execution and full site compromise. Researchers said activity has spread widely, with thousands of attempts, malicious plugins, backdoor accounts and web shells.