WordPress plugin audit