WP-Automatic plugin for WordPress, has a serious flaw that is posing a significant risk to millions of websites. What is it? How does it work, and what can yo do about it?