WordPress plugin installed on 1 million+ sites logged plaintext passwords

Enlarge (credit: Getty Images)
All-In-One Security, a WordPress security plugin installed on more than 1 million websites, has issued a security update after being caught three weeks ago logging plaintext passwords and storing them in a database accessible to website