Dismissing these as script kiddie attempts is no longer correct. This is a real industry now. It’s not like the large scale actors are going to pass up a valid unpatched vector just because it’s old hat.
yes, but how often otherwise would i get to use the word skiddie?
They're skiddies if they're trying WordPress attacks on domains that have never hosted anything remotely close to a CMS before...