WordPress NextGEN Gallery Plugin 1.9.1 - Arbitrary File Upload

NextGEN Gallery plugin's "photocratiajax" parameter is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...