WordPress List Attachments Shortcode Vulnerabilities