thumbnail WP Automatic WordPress plugin hit by millions of SQL injection attacks