WordPress plugin can be exploited to run PHP commands on the server by posting a comment that contains a malicious payload.

We've spent the past 12 months testing and reviewing hundreds of hardware and software products across 18 key technology ...