Access violation vulnerability in Easy Media Replace 0.1.3

The Easy Media Replace plugin for WordPress has a security vulnerability that could allow someone with access to the website (like an author) to delete files located on the server. This is possible because of a flaw in the plugin’s replace function which can be found in all versions up to 0.1.3. The person can only delete files that are of the same type as the ones they can upload.