Nasty WordPress plugin bug could let hackers delete your website content