Access violation vulnerability in Player Leaderboard 1.0.2

The Player Leaderboard plugin for WordPress has a security vulnerability that affects all versions up to 1.0.2. This vulnerability can be exploited through the use of the ‘player_leaderboard’ shortcode, which allows attackers with Contributor-level access or higher to execute arbitrary PHP files on the server. This can potentially bypass access controls, gain access to sensitive information, or even execute remote code if combined with file upload capabilities.