WordPress plugin auth bypass exploited almost immediately after disclosure

Just hours after a bug were disclosed, hackers started scanning for vulnerable instances.