Hackers Abuse Zero-day Vulnerability in WordPress SMTP Plugin