Recently patched vulnerabilities in the popular AMP for WP plugin are being targeted in an active Cross-Site Scripting (XSS) campaign, Wordfence reports.
http://feedproxy.google.com/~r/Securityweek/~3/OklcMMusDf8/attackers-exploit-recently-patched-popular-wordpress-plugin