Wordpress access control allow origin