A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows uploading arbitrary files without authentication, which can lead to remote code execution.
Custom formulas let you dictate exactly what goes into cells.
The vulnerability allows hackers to upload arbitrary files to a site’s server and achieve remote code execution.