WPtouch component for WordPress has been found to be vulnerable to an attack that allows a logged-in user with non-administrative privileges to upload PHP files to the server. The plugin has more than 5.5 million downloads, but the current security glitch is available only in versions 3.x. Website administrators relying on older builds, 1.x and 2.x, have nothing to worry about. The popularity of the component is given by the fact that it enables themes for rendering the website content on m…