WordPress vulnerability rated 9.8 enables unauthenticated attackers to launch attacks and obtain sensitive data.