WordPress Spice Blocks plugin <= 2.0.7.4 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin Spice Blocks versions = 2.0.7.4...