WordPress-sites aangevallen via lek in Yellow Pencil-plug-in