Incident cased by a vulnerable plugin

Yesterday at 4.42pm (9-10-2018) we get some websites using an old Database plugin has been defaced. The incident happened only on one server and involved 12 websites only. No other websites or servers were attacked. As the attack was targeting a specific part which...