In reply to Pat Hartl.

That's why we included a disclaimer regarding that: "Not all results that share this same campaign structure are guaranteed to be associated with this vulnerability, but the few listed above were recent posts on the WordPress.org forum from users who failed to update to 4.7.2 in time." There are so many more than just the couple examples listed.