The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
https://github.com/p0dalirius/CVE-2016-10956_mail_masta
https://github.com/p0dalirius/CVE-2016-10956-mail-masta
https://wpvulndb.com/vulnerabilities/8609
https://wordpress.org/plugins/mail-masta/#developers