Vendor
The payever WooCommerce Gateway plugin for WordPress contains an arbitrary file upload vulnerability in versions 4.8.0 and earlier that allows unauthenticated remote code execution.