WordPress Plugin Security Bug Report