WordPress Static Snapshot Plugin Command Injection Vulnerability

The Static Snapshot WordPress plugin through 0.2.1 contains a command injection vulnerability.

The plugin does not sanitise shell metacharacters in a user-supplied value before concatenating it into operating-system commands run by the server.

• Affected versions: through 0.2.1.
• Precondition: unauthenticated access.
• Impact: arbitrary command execution on the host.