A Vienna-based security shop says WordPress operators are still flying without a net. Aria Akhavan, founder of Haikhavan Security GmbH, told Automattic and the WordPress project about 26 vulnerabilities—several of them serious—and claims the maintainers have left them open. The weak spots sit in older plumbing that many sites still…