New WordPress security issues fixed in 4.0.1