Input validation vulnerability in WIP WooCarousel Lite 1.1.6

The WIP WooCarousel Lite plugin for WordPress has a security issue that allows attackers to insert harmful code into pages. This can happen when a user with contributor-level access or higher uses the plugin’s ‘wip_woocarousel_products_carousel’ shortcode. The plugin’s lack of proper input filtering and output protection makes it possible for this code to be executed when a user visits the affected page.