The YellowPencil plugin gets hack attack.
The YellowPencil plugin team have fixed the vulnerability with 7.2.0 version that you can download and install on your site from the below page.
Alternatively, you can update it by deleting the existing plugin and reinstalling latest version 7.2.0 of it from Admin Area -> Appearance -> Install Plugins
Please update the plugin as soon as possible on your site to prevent it from getting hacked.
If your site is already got hacked or getting redirected then you can fix it as described in the “My website gets an attack, how can I fix it?” section of the below page.
Please advise if you have more questions.