The bugs allow a range of attacks on websites, including deleting blog pages and remote code execution.
Source: Threadpost