WordPress 3.6 Multiple Function Path Disclosure Vulnerability