custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.
custom content type manager project custom content type manager