Are hacked Wordpress installations usually running old versions, or is the latest Wordpress version usually equally vulnerable?