Yes, it was actually using php2shell. Not a mediawiki vulnerability. It was the easier and less resilient variant of php2shell, but still a real POC. I'm confident that it could also do Wordpress if tasked to.