Attackers target new XSS in millions of WordPress sites • The Register

http://www.theregister.co.uk/2015/05/07/wordpresss_xss_twenty_fifteen/