Vulnerabilities in WP User Merger