[MR-XX]

Does Anyone know how to exploit WordPress 4.7.0/4.7.1 Plugin Insert PHP - PHP Code Injection ?

more detail:
https : // www . exploit-db . com/exploits/41308/
https : // blog . sucuri . net/2017/02/rce-attempts-against-the-latest-wordpress-rest-api-vulnerability.html

[Dutisto]

The exploit db post explain how you can do it. But there must be a plugin which allows PHP in page in the first place.
If you plain to get a shell or something, I think you can just get a JS shell instead of a PHP shell (don't know where i saw that).