WordPress String Locator Vulnerabilities