WordPress WP-Mon Plugin - Arbitrary File Download

This plugin is prone to an arbitrary file download vulnerability. Vulnerable file: http://localhost/wordpress/wp-content/plugins/wp-mon/assets/download.php Solution Update the plugin...