Hidden WordPress Admin Account Created After Admin Menu Editor Pro Update

Ibrahim Saud@tektrix

•updated Sep 16, 2026•0•0•1

Detects user creation, capability granting, or role modification events occurring on WordPress sites where the Admin Menu Editor plugin (versions 2.35 or 2.36) is active and the associated user account has administrator privileges. This pattern is often indicative of exploitation of known vulnerabilities in this specific plugin to perform unauthorized administrative actions.