1 Around 500,000 WordPress websites could be at risk from crucial plugin security flaw — here’s what we know March 30, 2026