WordPress Tock Widget Vulnerabilities