Input validation vulnerability in VG WooCarousel 1.3

The WordPress plugin called VG WooCarousel has a security issue that affects versions 1.3 and below. This means that attackers who have contributor-level access or higher can include and run any files they want on the server. This could allow them to bypass security measures, access confidential information, or even execute their own code. This is especially dangerous because even seemingly harmless files like images can be used to carry out these attacks.