🚨 CVE-2026-40748
Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.