Arbitrary file upload vulnerability in WordPress Ultimate Member plugin.

https://blog.nintechnet.com/arbitrary-file-upload-vulnerability-in-wordpress-ultimate-member-plugin/