A plugin for WordPress called The Limb Gallery, used for creating image and video galleries, has a security issue. This allows attackers who have at least Subscriber-level access to the site to upload any type of file they want, which could potentially lead to remote code execution.