OttoKit WordPress plugin has a serious security flaw, thousands of users possibly affected