Notes and Observations on WordPress Security