Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin