a couple more WordPress exploits