There is a problem with a plugin for WordPress called WP VR – 360 Panorama and Free Virtual Tour Builder. This could allow hackers to upload dangerous files to a website that uses this plugin. This could lead to remote code execution, which means the hacker could control the website.