wordpress

shell
- by updating 404.php in theme editor
- by uploading shell.php via new plugin install
  - for uploaded shell http://192.168.45.5/wp-content/uploads/

priviledge escalation
- check wp-config.php in wordpress dir , it contains machine user cred