WordPress Plugin Bug Impacts 1M Sites, Allows Malicious Redirects

The OptinMonster plugin is affected by a high-severity flaw that allows unauthorized API access and sensitive information disclosure on roughly a million WordPress sites.