Publication of PoC in popular WordPress plugin leads to scans for vulnerable sites