Two Gravity Forms WordPress plugin versions available on the official download page were injected with malware in a supply chain attack