WordPress plugin with 1.7 million downloads puts sites at risk of takeover | Dark Hacker News