Attackers exploit zero-day flaw in popular WordPress plug-in | PCWorld

Users should install newly released security patches or remove the affected plug-in