instawp String Locator Vulnerabilities