WordPress plugin under attack; Bricks Builder bug enables RCE
WordPress site takeover is possible without authentication via the actively exploited vulnerability.
Calvin Alkan Wordpress Bricks Builder Press Bricks Bricks Builder Bricks Wordpress Vulnerability Database
Source: scmagazine.com