Ninja Forms WordPress bug exposed over a million users to XSS attacks\, website hijacking