Vulnerability found in WordPress plugin with over 3 million installations

[]