Authenticated attackers can reset and delete affected websites thanks to a highseverity security hole discovered in a WordPress plugin with over 8,000 current instals.
Authenticated attackers might use the security flaw to reset WordPress sites and erase practically all database content and uploaded media.