https://securityreport.com/woocommerce-fixes-critical-upload-files-vulnerability/