Input validation vulnerability in Ultimate Classified Listings 1.6

The Classified Listings plugin for WordPress has a security vulnerability that affects all versions up to version 1.6. This vulnerability is called Local File Inclusion and it can be exploited by attackers who have at least Contributor-level access to the website. They can use a specific shortcode called ‘uclwp_dashboard’ to include and run their own .php files on the server. This can lead to bypassing security measures, accessing private information, or executing malicious code.