Input validation vulnerability in Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode 2.1.23

The Team Manager plugin for WordPress has a security issue called Local File Inclusion, which can be found in versions 2.1.23 and below. This means that attackers who are logged in with contributor-level access or higher can add and run any type of file on the server, including ones with PHP code. This can be used to get around security measures, get confidential information, or run code even if the file is supposed to be safe, like an image.