thumbnail Unauthenticated function injection vulnerability in WordPress Shortcode Addons plugin (unpatched). – NinTechNet