WordPress Cosign Single Signon Vulnerabilities