Input validation vulnerability in Event post 5.9.5

A plugin called “Event post” used for WordPress websites has a security issue. This issue, known as Local File Inclusion, affects all versions of the plugin up to 5.9.5. This means that hackers who don’t have permission can access and run any files they want on the server, including files with PHP code. They can use this to get around security measures, get private information, or run code even if the file types are supposed to be safe.