WP Statistics vulnerability