EWWW Image Optimizer prior to 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.
ewww image optimizer