The WordPress Theme “platform” contains a remote code execution vulnerability through an unchecked admin_init call. The theme includes the uploaded file from it’s temp filename with php’s include function.