WordPress History Collection 1.1.1 Arbitrary File Download

WordPress History Collection versions 1.1.1 and below suffers from an arbitrary file download vulnerability.