The vulnerability was first brought to my attention by Envato, the widely used theme and code marketplace (themeforest, codecanyon, etc.). From their notification: This vulnerability allows attackers ...