WordPress security plugin Hide My WP addresses SQL injection