Thousands of websites are at greater risk due to a WordPress plugin flaw.