Input validation vulnerability in Qi Addons For Elementor 1.7.2

The Qi Addons For Elementor plugin for WordPress, which allows users to add extra features to their website, has a security vulnerability. This vulnerability, called Remote File Inclusion, affects all versions up to and including 1.7.2. It can be exploited by authenticated attackers with Contributor-level access or higher. This means they can include remote files on the server, which can lead to the execution of malicious code. Please note that in order to exploit this vulnerability, the attacker needs to create a non-existent directory or target a specific situation where the system won’t recognize a non-existent directory.