Security WordPress Ultimate Product Catalog 3.8.6 Shell Upload June 23, 2016 007admin WordPress Ultimate Product Catalog plugin version 3.8.6 suffers from a remote shell upload vulnerability.