@GossiTheDog
Looks like Calif may have a PoC called php2shell that works against WordPress.