CVE-2019-11223 (supportcandy)

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
Source: NIST
CVE-2019-11223 (supportcandy)