WPvivid Backup & Migration plugin allows for arbitrary file upload which can lead to remote code execution.

With this simple, all-in-one solution you can create a stunning site with no technical know-how, but could Wix be a bit too simple for you?