Security WordPress Ultimate Product Catalog 3.8.6 Shell Upload June 23, 2016 007admin Leave a comment WordPress Ultimate Product Catalog plugin version 3.8.6 suffers from a remote shell upload vulnerability.