Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs