Electoral Commission had unpatched vulnerability on server :