WordPress Plugin Flaw Exploited to Create Admin Accounts, Wordfence Blocks 200+ Attacks
Critical CVE-2026-1492 in WPEverest's User Registration plugin (60K+ sites) lets attackers create admin accounts without authentication. Wordfence blocked 200+ attacks in 24 hours. Patch to 5.1.4 now.
