WordPress Custom Post Type Attachment Vulnerabilities