Popular WordPress plugin had a serious zero-day flaw. Over 280,000 WordPress sites may have been hijacked by zero-day hi