Researcher: WMF Exploit Sold Underground for $4,000