WordPress History Collection versions 1.1.1 and below suffers from an arbitrary file download vulnerability. Continue reading...