Plug-in and theme developers for WordPress websites have permissions to distribute patches to millions of websites, among other things. If an attacker gets in at this point, it can have far-reaching ...