threatpost.com
Unpatched Bug Under Active Attack Threatens WordPress Sites with XSS
The issue in the Rich Reviews plugin is being actively exploited.