Critical WordPress plugin bug puts thousands of sites in danger

An improperly implemented module inside a popular WordPress plugin could hand access to attackers.