> You can try to reproduce this on your website and you will see that you will not be able to get full control over your website
I have no tech details about it to reproduce. I am not a developer.
I trust for patchstack.com and their CRITICAL status of this issue.
I checked and found fake admin accounts in my WP (I did not create it).
I had to restore WP from backup to solve it.
> ThemeForest sends email notifications once the new version is released
It is not a solution in this situation. ThemeForest notifications sent with delay sometimes.
> We mentioned in our changelog that this update is important to fix the vulnerability.
Do you really think that customers should read changelog every day?))))
____
Please make an autoupdate as option for clients to avoid this issues in future. Please send it to developers!
