WordPress PHP Event Calendar 1.5 Arbitrary File Upload

WordPress PHP Event Calendar plugin version 1.5 suffers from an arbitrary file upload vulnerability.