I'm not them, but I'd say Conficker and those other windows file share worms were worse. They went after peoples personal computers rather than web servers so affected people less aware of how to deal with it. It's a little early to tell what this php one will all affect though.

The Microsoft SMB remote-root holes had much wider impact... you had things like railway station monitors going offline.

At the end of the day, nobody gives a shit if another WordPress blog gets hacked.