thumbnail Active exploitation of unauthenticated stored XSS vulnerabilities in WordPress Plugins