Remote File Upload Vulnerability on WordPress MailPoet Plugin (1.7+m downloads)
blog.sucuri.net