Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
(bleepingcomputer.com)
1.
2.