WordPress External Login Vulnerabilities