No choice but to turn off my Wordpress sites overnight. Living in UTC+x, it's practically a guarantee that the patch fixing this Severity 10 vulnerability will come through in the wee hours of the morning. Not taking the chance that some bot will rip through every Wordpress site as soon as the proofs of concept are let loose.