Input validation vulnerability in Two Way Chat – Send or receive messages to your user 3.1.4

The Two Way Chat plugin for WordPress has a security issue in versions 3.1.4 and below that can be exploited by malicious attackers. Attackers with administrator privileges can include and run any file on the server, including any kind of code written in PHP. This can be used to obtain confidential information, bypass security measures, or even execute code. This attack can be done even if the server only allows the uploading of “safe” files, such as images.