https://blog.wpsec.com/discovering-vulnerabilities-in-wordpress-plugins-at-scale/