WordPress plugin with 1.7 million downloads puts sites at risk of takeover(arstechnica.com)

http://arstechnica.com/security/2014/07/wordpress-plugin-with-1-7-million-downloads-puts-sites-at-risk-of-takeover/