Severe WordPress Plugin Vulnerabilities Affect Thousands of Sites