A WordPress Promo Banner Just Handed Out Admin Accounts
Somewhere, a marketing team at a plugin company thought a little promotional banner in the WordPress dashboard would be a harmless way to cross-sell upgrades. Attackers thought it would be a great place to hide a skeleton key. Guess who won…