Hackers exploit this vulnerability to create new administrative accounts on websites, install malware, and steal confidential information. There is a risk that attackers can create backdoors and obfuscate code, making it difficult for website owners or security tools to detect the problem.
It is also reported that hackers can rename vulnerable plugin files, which makes it difficult to detect and fix vulnerabilities. To protect their websites, users are advised to install updates and use only those themes and plugins that are necessary for their activities.