WordPress Constructor Vulnerabilities