WP Ghost, a popular security plugin, carried a 9.6-severity flawIt allows threat actors to execute malicious code, remotelyThe developers released a patch, and users should update nowThe vulnerability occurred due to insufficient user input value via the URL path that will be included as a file