CVE-2019-89242

This exploit leverages a path traversal vulnerability in WordPress 5.0.0 and earlier versions to achieve remote code execution by uploading a malicious image with embedded PHP code in its metadata and manipulating the file path to execute arbitrary commands.