Thousands of WordPress websites defaced through patch failures