The BuddyBoss plugin for Wordpress has been compromised.