Ninja Forms flaw exploited to hack WordPress sites

Attackers are exploiting authenticated stored XSS vulnerabilities in Ninja Forms and WPC Product Bundles for WooCommerce to install backdoors and create rogue administrator accounts.