Attacking WordPress and other applications