@dragonsidedd @jacqueline WordPress used to be my favorite remote code execution service. Especially back in the days when PHP would attach the X-PHP-Mailer header to emails, telling you exactly where to go to use the remote shell that was used to send that spam.