If you are using the Social Media Widget plugin (social-media-widget), make sure to remove it immediately from your website. Sucuri discovered it’s being used to inject spam into websites and it has also been removed from the WordPress Plugin repository. This is a very popular plugin with more than 900,000 downloads.
