Input validation vulnerability in Export and Import Users and Customers 2.5.3

The Export and Import Users and Customers plugin for WordPress has a security vulnerability where attackers can inject malicious code through a file called input.php. This can only be done by someone with administrator-level access or higher. If another plugin or theme is also vulnerable, the attacker could potentially delete files, access sensitive information, or run their own code.