Hackers have been actively exploiting a recently patched vulnerability in some websites. The vulnerability was fixed two weeks ago in WP Live Chat Support, a plugin for the WordPress content management system. It allows attackers to inject malicious JavaScript into sites that use the plugin. Security researchers say attackers are exploiting the vulnerability to cause sites using unpatched versions of the plugin to redirect to malicious sites or to display misleading popups. The attacks aren’t widespread, but there have been enough of them to raise concern.”]