Critical WordPress flaw exploited to execute malicious code

The fact

The vulnerability allows writing files that execute remote commands.

Unpatched sites are particularly vulnerable to attacks.