WordPress Autoptimize plugin version 2.7.6 suffers from an authenticated remote shell upload vulnerability.