In reply to Keith Davis.

Did you end up having to clean any sites that fell victim to the vulnerability? I remember this article from Joost de Valk highlighting what can happen if you wait to long to update all the things. https://yoast.com/update-core-themes-plugins/