Cpe:2.3:a:the_welcomizer_project:the_welcomizer:*:*:*:*:*:wordpress:*:*

The Welcomizer WordPress plugin contains a remote code execution vulnerability allowing authenticated subscribers to inject arbitrary PHP code via an insufficiently protected AJAX handler.