https://david-artykov.medium.com/a-bug-in-a-wordpress-plugin-leaves-20-000-websites-at-risk-of-phishing-attacks-abb8f8beca7d
