Input validation vulnerability in Cliengo – Chatbot 3.0.1

A popular plugin called Cliengo – Chatbot for WordPress has a security issue. This means that anyone who uses the plugin, up to version 3.0.1, may be vulnerable to an attack. The problem is that the plugin does not properly check for a security code, called a nonce, when performing a certain function. This could allow attackers who are not logged in to the website to trick the website administrator into doing something they should not.