Nasty session stealing hole filled in WordPress All in One SEO plugin

A million sites are at risk. Again. So patch, please

Wordpress has patched a hole in its popular All in One search engine optimisation plugin, a tool that's been downloaded by some 30 million users and is used on a million sites."