In reply to Neo.

I have to laugh at the idea that it is somehow sucuri's fault. Somehow you assume that bad guys can not find security problem in code by themselves. News flash. - bad guys are not idiots and probably can find security holes as well as sucuri's experts. More likely that sucuri was reactive and got the announcement after analyzing security breaches that actually happened.