Thousands of WordPress sites potentially at risk from plugin security flaw

Maximum severity flaw was recently discovered in a WordPress plugin used by more than 100,000 sites.