WordPress Plugin Code Injection Vulnerability (CNVD-2021-101468)

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The WordPress plugin is a WordPress open source application plugin. can be renamed to a PHP-terminated extension, allowing an authenticated “translator” user to inject PHP code into a PHP-terminated file in a web-accessible location. No details of the vulnerability are currently available.