An advisory has been issued about a high-severity WordPress vulnerability that makes it possible for attackers to inject arbitrary shortcodes into sites using the WordPress Popular Posts plugin.
Update: As pointed out in the comments, the WordPress shortcode didn’t work because it is specifically for embedding on a WordPress.com blog. Since TNW doesn’t use WordPress.com (we use our own ...