WordPress photo plugin opens 'a million sites' to SQLi database feasting

Using NextGEN Gallery? Update or kill it with fire

A critical flaw has been found in the third-party WordPress NextGEN Gallery plugin that is, according to wordpress.org, actively used by more than a million websites."