A patch has been released earlier this week but many WordPress sites remained unpatched —as usual.