$14.4K bounty paid for WordPress plugin vulnerability | Dark Hacker News