WordPress Timesheet Vulnerabilities