CVE-2026-5411: WP Captcha PRO Arbitrary File Upload to RCE (CVSS 8.8)

CVE-2026-5411 (CVSS 8.8): WP Captcha PRO ≤ 5.38 lets Subscriber users upload PHP webshells via the licensing module, enabling remote code execution.