The Top 10 – Popular posts plugin for WordPress versions before 2.3.1 is vulnerable to an attack which allows people to inject malicious code into a website. This code can be used to execute unwanted scripts on a victim’s browser, which could lead to their private data being stolen or their computer being infected with malicious software. To protect your website, make sure you update the plugin to the latest version.