Vulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com.
https://www.exploit-db.com/exploits/41540/
https://wordpress.org/plugins-wp/wp2android-turn-wp-site-into-android-app/
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1618