WordPress .htaccess Login Block Vulnerabilities