6,000 WordPress Sites Hacked to Install Plugins Pushing