This Metasploit module exploits an arbitrary PHP code execution flaw in the WordPress blogging software. This vulnerability is only present when the PHP ‘register_globals’ option is enabled (common for hosting providers). All versions of WordPress prior to 1.5.1.3 are affected.