Input validation vulnerability in ExS Widgets 0.3.1

The ExS Widgets plugin for WordPress has a security issue that affects all versions up to and including 0.3.1. This vulnerability allows attackers with Contributor-level access or higher to include and run any files they choose on the server. This means they can run any PHP code contained in those files, which can lead to bypassing access controls, accessing sensitive information, or executing code. This is particularly dangerous because even seemingly harmless files like images can be used to exploit this vulnerability.