A number of connected or "smart" toys expected to be top sellers this Christmas have "concerning vulnerabilities" that could pose a risk to child safety, a UK consumer group has warned.