WordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Colin Xu in WordPress Plugin user files versions = 2.4.2...