WordPress Powerplay Gallery Plugin <= 3.3 - Unrestricted File Upload

This vulnerability allows an attacker to execute arbitrary code by uploading a file with an executable extension. After that an attacker access it via a direct request to the file in *_uploadfolder/big/.

Solution

           Update the plugin.