Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Five critical flaws have been disclosed in WordPress plugins and a theme. They may enable authentication bypass, account takeover, site takeover, or arbitrary code execution.