Unpatched WordPress vulnerabilities