WordPress Coupon Referral Program Vulnerabilities