PageForge's theme upload accepts any file type and executes uploaded scripts server-side. Upload a webshell, get command execution, find the admin credentials, and deface the site.
