Here is an example: https://www.wordfence.com/blog/2020/05/nearly-a-million-wp-sites-targeted-in-large-scale-attacks/ https://www.wordfence.com/blog/2020/05/nea

Here is an example: https://www.wordfence.com/blog/2020/05/nearly-a-million-wp-sites-targeted-in-large-scale-attacks/ https://www.wordfence.com/blog/2020/05/nearly-a-million-wp-s... That is what happens if you are the WP admin and think that you don't need to update your plugins because "it's just XSS, nothing major".