A technique to semi-automatically find vulnerabilities in WordPress plugins