WordPress WP-Mon Arbitrary File Download

WordPress WP-Mon plugin suffers from an arbitrary file disclosure vulnerability.