WordPress users: remove this plugin if it's on your server:

Reshared post from +Unmask Parasites

A very popular WordPress plugin, Social Media Widget, fell to the dark side.

Its recent update contained a code to inject "payday spam" links into web pages.

It's not clear whether it was done intentionally by the developer, or their account was compromised and hackers "updated" the plugin in the repository. Nonetheless, the plugin has been removed from the official repository. It is highly recommended that you remove this plugin completely from your server if you have already updated it to version 4.

Embedded Link

WordPress Plugin Social Media Widget Hiding Spam – Remove it now
If you are using the Social Media Widget plugin (social-media-widget), make sure to remove it immediately from your website. We discovered it is being used to i

Google+: Reshared 1 times
Google+: View post on Google+

This post was first made on the Richard Hearne Google+ profile.