https://newsim.net/hackers-exploit-wordpress-plugin-auth-bypass-hours-after-disclosure/