XSS issue in the WordPress plugin patched by KingComposer