Attackers can bypass WordPress authentication, run commands as an administrator, and then install malicious plugins on ...