Arbitrary file upload vulnerability in WordPress Crelly Slider plugin. https://blog.nintechnet.com/arbitrary-file-upload-vulnerability-in-wordpress-crelly-slider-plugin/