WordPress plugin vulnerability opened up one million sites to remote takeover

Vulnerabilities in OptinMonster, an email marketing plugin for WordPress, left more than a million websites open to exploitation, security researchers at Wordfence warned.