WordPress JS Help Desk plugin <= 2.8.6 - Unauthenticated Remote Code Execution vulnerability

Unauthenticated Remote Code Execution vulnerability discovered by Connor Billings in WordPress Plugin JS Help Desk versions = 2.8.6...