WordPress CsvWPeC Coupon Plugin <= 1.1 - Remote File Upload

This plugin is prone to a remote file upload vulnerability, because user input is not properly sanitized. It allows a malicious user to upload executable files to a vulnerable wordpress installation. Solution Update the plugin...