https://malware.guide/news/popular-wordpress-security-plugin-found-storing-user-passwords-in-plain-text/