WordPress sites under attack via zero-day in abandoned plugin

WordPress sites under attack via zero-day in abandoned plugin
Developers of Total Donations plugin have gone missing, leaving former customers open to attacks.