The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.Referenceshttps://wordpress.org/plugins/wp-file-upload/#developers
