WordPress Custom Tinymce Shortcode Button Vulnerabilities