Eventin Vulnerability Restores Admin Power to User ID 1

A high-severity Eventin vulnerability can give administrator-equivalent capabilities back to WordPress user ID 1 after the account has been demoted….