Input validation vulnerability in Oshin 7.2.7

The Oshine theme for WordPress has a security issue called Local File Inclusion in versions up to 7.2.7. This means that people who are not logged in can include and run any files they want on the server. This could let them do things like get information they shouldn’t have or run code that could cause problems. This problem can happen even if they upload files that are supposed to be safe, like images.