ManageWP alerted me this morning that over 80 of the blogs I manage there are infected with a javascript exploit that, according to all of my searching, can only be injected into a site via compromised plugin that has DB writing ability.
When I compared the plugins installed on all infected sites with all of those not affected, the only plugin not shared on the uninfected sites was Simple Share Buttons Adder. More so, I just updated this plugin on all sites last Friday.
Has there been any discussion of this yet? Thank you.