Facebook for WordPress plugin vulnerability targets +500,000 sites

Two exploits can lead to a site takeover and malicious backdoors.