Active exploitation of CVE-2026-18072, a CVSS 9.8 video embedder backdoor, grants attackers full administrative control over 20,000 WordPress sites. #CVE202618072 #WordPress #CyberSecurity #Backdoor