Ah, WordPress security. Just when you thought you patched everything, a new unauthenticated RCE drops.