'All In One' WordPress Plugin Could Put Your Site At Risk


allinone.jpgIf you're using the popular All In One SEO Plugin on WordPress and you haven't updated to version 2.1.6 or above within the last month, it's time to do so now! The SEO Plugin was found by SucuriBlog to have a number of vulnerabilities that could allow hackers to change or add certain SEO parameters used by the plugin, potentially leading to penalties within your SEO rankings. Or worse, hackers had the ability to use the code to enter malicious javascript code within the admin's control panel. The vulnerabilities were addressed within the 2.1.6 version and you can download the updated version here.

...

TO READ THE FULL ARTICLE