Update a hyperlink in security.md

Fix a hyper link to 'attachment_fu' plugin.