Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating rogue administrator accounts without authentication. [...]
WP Maps Pro bug exploited to create admin accounts on WordPress sites
Summary + source link. No paywalls, no tracking.