WordPress Web Invoice Vulnerabilities