Bill Toulas / BleepingComputer:
Updraft patches its AIOS WordPress plugin, used by 1M+ sites, after it logged plaintext passwords; Updraft didn’t warn its users during the exposure period  —  The All-In-One Security (AIOS) WordPress security plugin, used by over a million WordPress sites, was found to be logging plaintext passwords …

Source From techmeme