Thousands of WordPress Sites Exposed by Yellow Pencil Plugin Flaw

Click here to visit Original posting

The Yellow Pencil Visual Theme Customizer plugin was removed on Monday from the WordPress.org repository because of a privilege escalation bug which would have allowed potential attackers to update arbitrary options on vulnerable installations. [...]