Input validation vulnerability in WP Posts Carousel 1.3.7

The WP Posts Carousel plugin for WordPress has a security issue that allows attackers to insert harmful code into pages. This can be done by exploiting the ‘auto_play_timeout’ feature in versions 1.3.7 and below. The plugin did not properly protect against this type of attack, making it possible for someone with Contributor-level access or higher to insert their own code into pages that will run when a user visits that page.