WordPress plugin with 1.7 million downloads puts sites at risk of takeover | Hacker News Reader