The contus-hd-flv-player WordPress plugin was affected by an Arbitrary File Upload security vulnerability.
packetstormsecurity.com/files/113570/