SEOPress WordPress plugin flaw left 100k sites wide open

[HEXUS]

Version 5.0.4 patches flaw that let attackers "inject arbitrary web scripts on a site".

Read more.

[CAT-THE-FIFTH]

[Darkedge]

A SEO product is actually dangerous, that never happens - usually it's just snake oil anyway

[AGTDenton]

Definitely worth using auto updates

[Jonj1611]

If you have a Wordpress site, Wordfence is definitely the plugin you want, even the free version of it will protect you

[AndyM2012]

The funny thing is that search engines are constantly trying to defeat the SEO parasites. Well, it would be funny if the parasites weren't as effective as malaria.

[philehidiot]

Definitely worth using auto updates

Yes and no. If your site is being targetted, it's often quite possible to mimick the update service and send a bogus update with a little "extra sauce". Or to MITM you and intercept, modify and pass on the update. I forget exactly how to do these things but auto updates can be a double edged sword.