WordPress Candidate Application Form plugin version 1.0 suffers from an arbitrary remote file download vulnerability. Continue reading...