Critical WordPress Plugin Flaw Enables Authentication Bypass Attacks