Critical vulnerability in WooCommerce WordPress Plugin