Hackers are creating backdoor accounts and cookie files on WordPress sites running OneTone

Hackers are actively targeting WordPress sites running the OneTone theme to exploit a vulnerability that allows them to read and write site cookies and create backdoor admin accounts.