Small WordPress sites leaking like sieves

Login-stealing C&C server spotted

Wordpress admins hoping for some feet up time after last week's Twenty Fifteen XSS plugin vulnerability appear to have yet another vulnerability to handle."