WordPress Ultimate Product Catalog plugin version 3.8.6 suffers from a remote shell upload vulnerability. Continue reading...