Input validation vulnerability in Point Maker 0.1.4

The Point Maker plugin for WordPress has a security issue that affects versions up to 0.1.4. This can be exploited by attackers who have contributor-level access or higher, allowing them to include and run any files on the server. This could lead to bypassing security measures, accessing confidential information, or executing malicious code even if only “safe” file types like images were uploaded.