WordPress Security Plugin Caught Logging Plaintext Passwords