Unpatched WordPress Flaw Leads to Site Takeover, Code Execution
A file deletion vulnerability that remains unpatched 7 months after being reported allows for the complete takeover of WordPress sites and for arbitrary code execution.
Read more: Unpatched WordPress Flaw Leads to Site Takeover, Code Execution
Story added 27. June 2018, content source with full text you can find at link above.