WP Maps Pro bug exploited to create administrator accounts on WordPress sites

Attackers are targeting WordPress websites running WP Maps Pro version 6.1.0 or older. The vulnerability allows administrator accounts to be created without authentication. Researchers at WordPress security company Defiant blocked more than 3,600 exploitation attempts over the past 24 hours, and malicious activity has been observed.