A popular WordPress plugin is once again being leveraged in website takeover attacks.