Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk