xyz vendor Wordpress Plugin Vulnerabilities