Det er funnet feil, som gjør at svært mange plugins er berørt.
Multiple WordPress Plugins are vulnerable to Cross-site Scripting (XSS) due to the misuse of theadd_query_arg() and remove_query_arg() functions. These are popular functions used by developers to modify and add query strings to URLs within WordPress.
Noen plugins som er på listen
[ul]
[li]Jetpack[/li][li]WordPress SEO[/li][li]Google Analytics by Yoast[/li][li]All In one SEO[/li][li]Gravity Forms[/li][li]Multiple Plugins from Easy Digital Downloads[/li][li]UpdraftPlus[/li][li]WP-E-Commerce[/li][li]WPTouch[/li][li]Download Monitor[/li][li]Related Posts for WordPress[/li][li]My Calendar[/li][li]P3 Profiler[/li][li]Give[/li][li]Multiple iThemes products including Builder and Exchange[/li][li]Broken-Link-Checker[/li][li]Ninja Forms[/li][/ul]
Blir ikke overrasket om det er flere.