Security researchers confirmed in-the-wild exploitations of the mx-severity flaw, allowing unauthenticated actors gain full admin access on vulnerable sites.