WordPress Plum: Spin Wheel & Email Pop Up Vulnerabilities