Just a heads up:
http://arstechnica.com/security/2014...-to-hijacking/
Bugs in widely used WordPress plug-in leave sites vulnerable to hijacking
All in One SEO Pack gives unprivileged users admin powers.
The just-released version that fixes the vulnerabilities is 2.1.6.