This is worth a title clarification, I think. Seems a pretty clear attempt to sensationalize. E.g. “Vulnerability in Wordpress Database Reset Plugin” would be clearer.

Oh, that makes this a lot less exciting than it seemed.