WordPress code audit