Fix #155 wp-funeral-press XSS