funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "3.3.2"
},
{
"introduced": "0"
},
{
"last_affected": "3.3.3"
}
]
}