WordPress Plugin Flaw Exposes 40,000 Sites to Admin TakeoverMore than 40,000 WordPress sites have been exposed to an authentication bypass flaw in the User Profile Builder plugin that can let unauthenticated attackers access the site’s administrator account.