Product
The WP User Frontend Pro WordPress plugin is vulnerable to arbitrary file upload via the upload_files function, allowing authenticated attackers to achieve remote code execution.