Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com.
https://www.exploit-db.com/exploits/41540/
https://wordpress.org/plugins-wp/mobile-app-builder-by-wappress/