Input validation vulnerability in Fusion Engage 1.0.5

The Fusion Engage plugin for WordPress has a security vulnerability which allows unauthenticated attackers to include and execute any file type on the server. This vulnerability affects all versions up to 1.0.5 and can be exploited through the ‘video’ parameter. With this vulnerability, attackers can bypass access controls, obtain sensitive data, or even execute code stored in files.