🚨 CVE-2026-40749
Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.