Compromising a crappy wordpress site means compromising mailbox credentials.
https://lolware.net/blog/2020-09-02-autodiscover-circus/