$ 0 0 Admin Custom Login WordPress plugin affected by persistent Cross-Site Scripting via Logo URL field