A flaw in the Jupiter X Core plugin has been identified, allowing upload of malicious SVG files and remote code execution on vulnerable servers
First seen on infosecurity-magazine.com
Jump to article: www.infosecurity-magazine.com/news/wordpress-plugin-flaw-exposes/