WordPress Work The Flow 2.5.2 Shell Upload

WordPress Work The Flow plugin version 2.5.2 suffers from a remote shell upload vulnerability.