Input validation vulnerability in Friendly Functions for Welcart 1.2.4

The Welcart plugin for WordPress, called “Friendly Functions”, has a security issue in all versions up to 1.2.4. This is because the plugin does not properly check for a security code when updating settings. This means that someone without permission to access the site could trick the site administrator into taking an action, like clicking on a link, that would allow them to inject harmful code onto the site.