JavaScript injection via WordPress exploitation