wordpress wishlist plugin has a top tier ranked vulnerability