Access violation vulnerability in The Wound 0.0.1

A plugin called the-wound for WordPress has a security issue that affects all versions up to 0.0.1. This means that someone without proper authorization can add and run any type of files on the server, which could contain harmful code. This can be used to get around security measures, get important information, or even run code when it seems like only harmless files, like images, are being uploaded.