https://blog.wpsec.com/critical-security-flaw-in-the-woocommerce-payments-plugin/