Hackers exploited WordPress Popup Builder plugin flaw to compromise 3,300 sites

https://securityaffairs.com/160329/hacking/wordpress-popup-builder-plugin-bug.html