Hackers Exploit Zero-Day in WordPress Plugin with 200K Installs.