Understanding WordPress Zero-Day Vulnerabilities