Authenticated RCE vulnerability in WordPress Secure File Manager plugin (unpatched).

https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/