WordPress Custom Query Blocks Vulnerabilities