WordPress Event-Registration plugin version 5.43 suffers from an arbitrary file upload vulnerability.