Hackers try to exploit WordPress plugin vulnerability that’s as severe as it gets