WordPress Spiffy Calendar Vulnerabilities