WordPress: Upload user-submitted files from the frontend