Input validation vulnerability in Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget 1.6.10

A popular plugin for WordPress called “Post Grid, Slider & Carousel Ultimate” has a security issue in versions 1.6.10 and below. This vulnerability, known as Local File Inclusion, allows attackers with contributor-level access or higher to add and run any files they want on the server. This means they can run any code written in those files, which could be used to get around security measures, access private information, or even execute malicious code. This is a serious problem and should be addressed immediately.