RSS
XSS plugin vulnerabilities plague WordPress users
Naked Security
WordPress plugin hole could have allowed attackers to wipe websites