-3.9.1WordPress 3.8.x-3.8.3WordPress 3.7.x-3.7.3WordPress 3.6.xWordPress 3.5.x
How to fix
Delete xmlrpc.php from the WordPress root directory.
Upgrade WordPress to the latest official version.
...
database account and password. The vulnerability file is in /app/controller/downController.php.
How to fixUpgrade FengCMS to the latest official version. ...