Two major security flaws are affecting more than six million WordPress websites

They were already used in more than 440,000 attacks