WordPress Buddypress Instant Chat Vulnerabilities