Security flaws in half of U.K. retailers' websites leave them open to attack, new research found.