WordPress Backup and Restore plugin version 1.0.3 suffers from an arbitrary file deletion vulnerability.