WordPress Limit Login Attempts (spam Protection) Vulnerabilities