https://www.techradar.com/pro/this-wordpress-plugin-with-over-a-million-installs-had-a-major-security-flaw