Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal

As a contributor

1) Add new download
2) Set "Downloadable File" to http://example.com/wp-content/../wp-config.php
3) Enable "Dispatch the file via PHP directly"
4) Preview
5) Click download button
6) wp-config.php file is downloaded