Input validation vulnerability in academist 1.3

The Academist theme for WordPress has a security issue called Local File Inclusion. This means that hackers who are not logged in can add and run any files they want on the server, even ones with PHP code. This can let them get around security measures, get confidential information, or run their own code if they can upload images or other types of files that are usually considered safe.