This top WordPress plugin could be hiding a worrying security flaw, so be on your guard

Older versions of WP Ghost grant threat actors remote code execution abilities so make sure to update the plugin.