Hackers are targeting a critical WordPress flaw, so be on your guard