WordPress Plugin Confusion: How an update can get you pwned | Open Awesome