I have a Woo based site and received the email in morning. There was some confusion as I clicked on the embedded links (one link sent me to a phishing site warning).

However, I contacted Woo directly and received a response within minutes. They made rapid information releases so that I was able to update my framework without a hitch.

Given the situation I believe that they did a good job.

It started me to think about how I need to plan for a similar crisis if it happens on one of my sites.