update wordpress vulns