51 patched vulnerabilities and counting: one popular WordPress plugin's history shows why "just keep updating" isn't enough anymore.