WordPress Simple User Avatar Vulnerabilities