No one other than person or people that released that data knows what happened for sure but, one hole in your security that will allow shell access is just as b

No one other than person or people that released that data knows what happened for sure but, one hole in your security that will allow shell access is just as bad as another. Some are worse than others but, all need to be fixed. It also illustrates the complexity of security. The smallest decisions (a wordpress plugin), hosting your own wordpress web servers, using wordpress, can have on your security. Whether you have an open door, an open window or an inside man to unlock it from the inside, they all leave you exposed.