WordPress WP All 3.2.3 Shell Upload

WordPress WP All Import plugin versions 3.2.3 and below suffer from a remote shell upload vulnerability.