A popular WordPress plugin was found carrying two flaws that can cause data leaks.