WordPress WP-Instance-Rename plugin version 1.0 suffers from an arbitrary file download vulnerability. Continue reading...