how to audit wordpress plugin