https://blog.wpsec.com/security-flaw-in-wp-statistics-plugin/