This vulnerability could be used by authors on a site to manipulate any files in the WordPress installation