Zero-Day Flaw in WordPress Plugin Used to Inject Malware into Sites

Feb. 8, 2015

Cybercriminals have exploited a zero-day flaw in the popular FancyBox for WordPress plugin to inject malicious iframes into many websites. The vulnerability has been patched.