A New Plugin Bug Attacks Millions of WordPress Sites and Starts Internet-Wide Hacking Spree Security researchers discovered a new plugin bug in WordPress that is capable of uploading malicious files. Millions of sites are now compromised. by Giuliano J. de Leon