Your WordPress plugin says it is up to date. It might not be.
A critical miniOrange single sign-on flaw was patched in July and sites are still being broken into. The catch: the plugin ships in seven editions with seven unrelated version numbers, and the advisory only ever named one of them.









