WordPress Credits Shortcode Vulnerabilities