More than one million WordPress sites were running a vulnerable version of the Loginizer plugin.

Read more from the Source