Input validation vulnerability in immonex Kickstart Team 1.6.9

A popular plugin for WordPress called immonex Kickstart Team has a security flaw in versions 1.6.9 and below. This flaw allows attackers with contributor-level access or higher to include and run any files they want on the server. This means they can run malicious code and access sensitive information. Even files that are usually considered safe, like images, can be used to execute this attack.