On 23 January, a WordPress plugin installed on over 200,000 websites was found to have a security problem. The flaw allowed anyone to create a request on behalf of an administrator and inject executable code into a vulnerable website. It was...