2019-02-19 UTC
# 
sknebel https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/ - especially "However, the Path Traversal is still possible and can be exploited if plugins are installed that incorrectly handle Post Meta entries." - something to review for community plugins?