thumbnail Jetpack fixes critical information disclosure flaw existing since 2016