Hackers are exploiting CVE-2026-8181 in Burst Statistics to hijack WordPress sites. Users should update to version 3.4.2 now.