“By focusing on vulnerabilities in the underlying platform, it is easy to succeed in opportunistic attacks targeting any user of the WordPress software,” said Chris Morales, head of security analytics at Vectra.