The extend-wordpress WordPress plugin was affected by a Shell Upload security vulnerability.
vulners.com/exploitdb/EDB-ID:17872