[rwth-security] WordPress plugin with 5 million installs has a critical vulnerability