Buggy WordPress plugin exposes 100K sites to takeover attacks | Hacker News Reader