Really, all previous PHP versions are affected?
There are so many keeping old php versions alive for compatibility with whatever software
There's a lot of zombie software on the net that is ripe for the picking. More food for the botnet.
Wordpress in particular is a stupidly simple vector.
I can't think of a faster way to clear out the vulnerable surface area.
If only there was a way to trivially rewrite just about any software