​WordPress: Why we didn't tell you about a big zero-day we fixed last week