Uploaded thumbnails are stored here.
Only JPG, PNG and WebP uploads are accepted by admin.php.
PHP/script execution is disabled by .htaccess on Apache.
