WordPress versions prior to 7.0.4 are vulnerable to a remote code execution vulnerability via malicious Postscript file uploads by users with Author level or higher privileges. This vulnerability requires the server to have Imagick and Ghostscript installed and a user with the 'upload_files' capability. WordPress 7.0.4 and all maintained older branches back to 4.7 include a fix for this issue.