WordPress Hotelrunner Booking Widget Vulnerabilities