Unauthenticated Arbitrary File Upload vulnerability discovered by Jasper Weijts (Onvio) in WordPress Ninja Forms File Uploads Extension premium plugin (versions <= 3.0.22).
Update the WordPress Ninja Forms File Uploads Extension premium plugin to the latest available version (at least 3.0.23).