Critical WordPress plugin flaw exposed some 40,000 users ...
Here's how to stay safe ...