By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the ...