🚨 CVE-2026-39591
Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions.