Security researchers have warned of a critical new zero-day vulnerability in a WordPress plugin actively exploited in the wild. The Fancy Product Designer plugin is installed on over 17,000 sites, allowing users to upload images and PDF files to products, according to experts at security vendor Wordfence.

Read full article on Infosecurity