[spyder]

And it has been already exploited: http://wordpress.org/support/topic/plugin-ezpz-one-click-bac...