This is a minor update that fixes a serious security hole in shortcode attributes. You are strongly encouraged to upgrade to the current version. If you notice any problems with the shortcode, please contact Iptanus.
You can check more details in the Release Notes of the plugin’s support page.
Users who have purchased the Professional version of the plugin can download the latest one by logging into their Iptanus account, selecting the order and downloading the new file. Instructions for installing the new version can be found here.
Users of the Free version can update to the latest one using the Update feature of the Plugins section of their Dashboard.
The Iptanus team keeps working to make WordPress File Upload easier to use and freer of bugs, and will go on issuing new releases. Professional licences are one-off, and their updates never expire.
For any questions, or to report a bug, please contact us.
The Iptanus team

Pingback: WordPress File Upload Plugin 4.3.2 – Stored Cross Site Scripting – 安百科技
Hi, this has been fixed in latest version 4.3.4
Regards
Nickolas
Pingback: WordPress File Upload Plugin 4.3.2 - Stored Cross Site Scripting - 0DAY DATABASE
Pingback: WordPress File Upload Plugin 4.3.2 - Stored Cross Site Scripting