It's sad how many wordpress installs haven't been patched in a decade. they're so old even new exploits aren't supported.

ha! Who knew ignoring critical updates and continuing to run deprecated software while kicking the can down the road while focusing solely on building new features would turn out to be the best security policy after all.