A popular WordPress plugin was found carrying two critical vulnerabilities that allow threat actors to upload files, tamper ...