PHPMailer

 PHPMailer  is popular code for sending email from PHP, including WordPress, though renamed as class-phpmailer.php, and has a remote code execution security vulnerability per https://twitter.com/hanno/status/813309977121222656.