There might be a second attack vector for the exploit, i recommend deactivating rich_media (i.e. website previews)

in your pleroma config for the time being