Arbitrary file upload vulnerability in WordPress Delete-All-Comments plugin. https://blog.nintechnet.com/arbitrary-file-upload-vulnerability-in-wordpress-delete-all-comments-plugin/