site vulnerability fixes