Over 2,000 WordPress sites are infected as part of a keylogger campaign that leverages an old malicious script.
Source: Threadpost