WordPress critical flaw leads to database wipe out