Vulnerabilities in wp-buy software