$20 per zero-day is already the WordPress plugin reality