If it is a DNS name it adds TARGET into the XML as a DNS that is sent to the vuln wordpress and the wordpress looks it up itself currently.