WordPress Magic Post Thumbnail Vulnerabilities