Wordpress urges users to update now to fix critical security holes