WordPress Template Plugin Vulnerability Hits Over 1 Million Sites