Product
The MaxUpload WordPress plugin is vulnerable to unauthenticated remote code execution via insufficient filename validation during chunk assembly.