A popular plugin for selling tickets and managing events on WordPress called WpEvently has a security issue. This issue, known as Local File Inclusion, allows attackers with a certain level of access to include and run any file on the server. This can lead to unauthorized access, theft of sensitive information, or even the execution of malicious code. The vulnerability affects all versions of the plugin up to 4.2.1.