That's a bit of an exaggeration, because this requires a precise race condition. The race condition is very possible but fairly unlikely unless you apply the P

That's a bit of an exaggeration, because this requires a precise race condition. The race condition is very possible but fairly unlikely unless you apply the Proof-of-Concept patch to make a huge gaping delay in the kernel where the exploit can run. WordPress probably has unpatched vulnerabilities, but it would take many thousands of attempts to exploit this hole.