Sergiu Gatlan @ bleepingcomputer.com
The JetPack API could be used by authors on a site to manipulate any files in the WordPress installation.