A file delete vulnerability in WordPress can be elevated into a remote code execution vulnerability for plugins like WooCommerce.
Source: Threadpost