2 ms·

My point exactly. If instead of wordpress they had a copy of some other big-old-java-thingie it would have been just as exploitable.