At the same time, PatchStack found Chaty Pro, a popular WordPress plugin with some 18,000 ... so it is possible to upload a malicious PHP file and access it by brute forcing possible file names ...