Two WordPress plugins required by the premium ... arbitrary files to the server, execute code, escalate privileges to administrator level, and perform SQL injections. The WPLMS theme is a learning ...

It was disclosed publicly by researchers at PatchStack vulnerability mitigation service on March 13 and described as an SQL injection ... plugins that allow uploading files and code editing.