Between 18 October 21:32 UTC and 19 October 07:29 UTC, three WordPress sites I manage — referred to here as xxxx.com, yyyy.com and zzzzz.com — were each implanted with backdoor plugins. No vulnerability was exploited….