WordPress Plugin Vulnerability: 3,300 Sites Compromised by Malware Attack