CPE
The MIPL Grouped Checkout Fields plugin for WordPress is vulnerable to unauthenticated arbitrary file uploads via the mipl_wc_upload_file function, potentially resulting in remote code execution.