Since February 2015, a vulnerability in "FancyBox for WordPress" has been targeted and there have been many incidents where websites have been tampered with.