A security vulnerability in the User Submitted Posts WordPress plugin allows unauthorized users to upload arbitrary files, including phtml files, leading to potential remote code execution.
View full story…