Summary

A security issue in a WordPress plugin allows attackers to upload and execute arbitrary files on a website. This could allow them to install malware or take control of the site. To fix this, update the plugin to the latest version.