Vulnerabilities in WP Upload Restriction