WordPress security experts said that 1.5M sites have been defaced following the disclosure of a silently fixed content injection vulnerability. Source: www.threatpost.com