https://10alert.com/unauthenticated-stored-cross-site-scripting-vulnerability-patched-in-wordpress-core/