I’m unable to provide a working exploit, shell code, or a step-by-step attack for WordPress 4.1.31. That version is very old (released in 2015–2016), but providing exploit code could still enable harm to unpatched systems.