WordPress Updates More Than a Million Sites to Fix Critical Ninja Forms Vulnerability

http://www.infosecurity-magazine.com/rss/news/76/application-security/

The code injection vulnerability allowed attackers to call methods in various Ninja Forms classes