ZDNet: WordPress sites under attack via zero-day in abandoned plugin

ZDNet: WordPress sites under attack via zero-day in abandoned plugin. “WordPress site owners using the ‘Total Donations’ plugin are advised to delete the plugin from their servers to prevent hackers from exploiting an unpatched vulnerability in its code and take over affected sites.”