Hi, I believe this is another scam but could they use the sender email: [email protected] to send these kind of emails (quoted below )?
A critical vulnerability on the site: …..com, has been detected by the WordPress Security Team.
The detected Remote Code Execution (RCE) high-risk vulnerability on your site could result to the execution of malicious code, jeopardizing your data, user information, and overall site security.
We strongly recommend you to install the CVE-2024-46188 Patch immediately, as we are continuously working to fix this significant security vulnerability in the next WordPress update.
Click the button below to download the plugin, and then proceed to install and activate it on your site. This guarantees a fast and straightforward defense against potential exploits and malicious actions related with this vulnerability.
The WordPress Security Team”