Millions of WordPress sites risk hijacking due to flaw in default theme
net-security.org