Input validation vulnerability in Tribulant Gallery Voting 1.2.1

The Tribulant Gallery Voting plugin for WordPress has a security vulnerability that affects all versions up to 1.2.1. This vulnerability is known as Cross-Site Request Forgery and it occurs because the plugin does not properly check for a unique security code before executing a function. As a result, attackers who are not logged in to the website can modify settings and insert harmful code through a fake request, if they can trick the website administrator into taking an action, such as clicking on a link.