For Pete's sake, editors. The linked article does not mention Joomla or Wordpress at all, and the white paper mentions them only once in 23 pages, in a sentence speculating that the infection vector *may* be associated with either platform.
So the Register prints a klaxon headline beginning with "Wordpress..."
Seriously thinking of cancelling my subscription here.