WordPress auto-update server had flaw allowing anyone to add anything to websites worldwide

About 27 per cent of the entire WWW at risk, we're told

Up to a quarter of all websites on the internet could have been attacked through a since-patched vulnerability that allowed WordPress' core update server to be compromised."