WordPress Admin Account Creation via Compromised Admin Menu Editor Pro

Ibrahim Saud@tektrix

•updated Sep 16, 2026•1•0•3

Detects web server processes invoking user creation scripts or functions specifically associated with the 'admin-menu-editor-pro' WordPress plugin. This activity is indicative of an attacker attempting to create a new administrative user account after exploiting a vulnerable WordPress plugin or site configuration.