A SQL injection vulnerability was found and fixed in the popular WooCommerce plugin. Please upgrade immediately to WooCommerce version 2.3.6. Props to both WordFence (who found the problem) and WooCommerce who patched it very quickly.
Barbara Feldman: WordPress troubleshooter for digital agencies, web designers, and virtual assistants.